Red Hat Security AdvisoryRHSA-2020:1292
qemu-kvm-rhev security update
Released 2020-04-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHV-M 4.3 qemu-img-rhev-10:2.12.0-44.el7_8.1, qemu-kvm-common-rhev-10:2.12.0-44.el7_8.1, qemu-kvm-rhev-10:2.12.0-44.el7_8.1 +1
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts qemu-img-rhev-10:2.12.0-44.el7_8.1, qemu-kvm-common-rhev-10:2.12.0-44.el7_8.1, qemu-kvm-rhev-10:2.12.0-44.el7_8.1 +1
Fixes 1 record
Priority LOW 30
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.02486 · Published 2020-02-06 · Partial fix CWE-120
