Red Hat Security AdvisoryRHSA-2020:1358
virt:rhel security and bug fix update
Released 2020-04-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) SLOF-20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab.src::virt-devel:rhel, hivex-1.3.15-7.module+el8.1.0+4066+0f1aadab.i686::virt-devel:rhel, hivex-devel-1.3.15-7.module+el8.1.0+4066+0f1aadab.i686::virt-devel:rhel +47
- Red Hat Enterprise Linux AppStream (v. 8) SLOF-20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab.noarch::virt:rhel, SLOF-20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab.src::virt:rhel, hivex-1.3.15-7.module+el8.1.0+4066+0f1aadab.aarch64::virt:rhel +47
Fixes 2 records
Priority MEDIUM 40
An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Bloc…
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.04018 · Published 2020-02-11 · Partial fix · 4.2.1 CWE-122
Priority LOW 31
tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC.
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.03566 · Published 2020-01-16 · Partial fix CWE-787
