Red Hat Security AdvisoryRHSA-2020:2342
qemu-kvm-rhev bug fix update
Released 2020-06-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHV-M 4.2 qemu-img-rhev-10:2.12.0-18.el7_6.11, qemu-kvm-common-rhev-10:2.12.0-18.el7_6.11, qemu-kvm-rhev-10:2.12.0-18.el7_6.11 +1
Fixes 3 records
Priority MEDIUM 55
ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.16658 · Published 2019-07-29 · Partial fix CWE-755
Priority LOW 31
tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC.
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.03566 · Published 2020-01-16 · Partial fix CWE-787
Priority LOW 30
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.02486 · Published 2020-02-06 · Partial fix CWE-120
