Red Hat Security AdvisoryRHSA-2020:2065
qemu-kvm-ma security update
Released 2020-05-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server EUS (v. 7.6) qemu-img-ma-10:2.12.0-18.el7_6.6, qemu-kvm-common-ma-10:2.12.0-18.el7_6.6, qemu-kvm-ma-10:2.12.0-18.el7_6.6 +1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) qemu-img-ma-10:2.12.0-18.el7_6.6, qemu-kvm-common-ma-10:2.12.0-18.el7_6.6, qemu-kvm-ma-10:2.12.0-18.el7_6.6 +1
Fixes 1 record
Priority MEDIUM 55
ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.16658 · Published 2019-07-29 · Partial fix CWE-755
