Red Hat Security AdvisoryRHSA-2020:3040
virt:rhel security update
Released 2020-07-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v. 8.0) SLOF-20171214-6.gitfa98132.module+el8.0.0+4084+cceb9f44.noarch::virt:rhel, SLOF-20171214-6.gitfa98132.module+el8.0.0+4084+cceb9f44.src::virt:rhel, hivex-1.3.15-7.module+el8.0.0+4084+cceb9f44.ppc64le::virt:rhel +47
Fixes 1 record
Priority LOW 30
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.02486 · Published 2020-02-06 · Partial fix CWE-120
