Red Hat Security AdvisoryRHSA-2020:3906
qemu-kvm security, bug fix, and enhancement update
Released 2020-09-29 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-175.el7, qemu-kvm-10:1.5.3-175.el7, qemu-kvm-common-10:1.5.3-175.el7 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-175.el7, qemu-kvm-10:1.5.3-175.el7, qemu-kvm-common-10:1.5.3-175.el7 +1
- Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-175.el7, qemu-kvm-10:1.5.3-175.el7, qemu-kvm-common-10:1.5.3-175.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-175.el7, qemu-kvm-10:1.5.3-175.el7, qemu-kvm-common-10:1.5.3-175.el7 +1
Fixes 2 records
Priority LOW 25
qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.005 · Published 2018-08-29 · Partial fix
Priority LOW 18
QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEn…
CVSS 3.1LOW 3.5· Adjacent network · Low privileges · No interaction · EPSS 0.00866 · Published 2020-03-05 · Partial fix CWE-401
