Red Hat Security Advisory

RHSA-2020:1505

qemu-kvm-ma security update

Released 2020-04-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server EUS (v. 7.5) qemu-img-ma-10:2.10.0-21.el7_5.5, qemu-kvm-common-ma-10:2.10.0-21.el7_5.5, qemu-kvm-ma-10:2.10.0-21.el7_5.5 +1
Red Hat Enterprise Linux Server Optional EUS (v. 7.5) qemu-kvm-common-ma-10:2.10.0-21.el7_5.5, qemu-kvm-ma-10:2.10.0-21.el7_5.5, qemu-kvm-tools-ma-10:2.10.0-21.el7_5.5

Fixes 1 record

TI-2020-01657 CVE-2020-1711 · GHSA-8gvc-95pj-x5r8

Heap-based buffer overflow in Red Hat QEMU

MEDIUM 40

An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Bloc…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.04018 Published 2020-02-11 Partial fix · 4.2.1 CWE-122