Red Hat Security AdvisoryRHSA-2020:3907
qemu-kvm-ma security update
Released 2020-09-29 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7) qemu-img-ma-10:2.12.0-48.el7, qemu-kvm-common-ma-10:2.12.0-48.el7, qemu-kvm-ma-10:2.12.0-48.el7 +1
- Red Hat Enterprise Linux Server Optional (v. 7) qemu-kvm-common-ma-10:2.12.0-48.el7, qemu-kvm-ma-10:2.12.0-48.el7, qemu-kvm-tools-ma-10:2.12.0-48.el7
Fixes 2 records
Priority LOW 25
qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.005 · Published 2018-08-29 · Partial fix
Priority LOW 18
QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEn…
CVSS 3.1LOW 3.5· Adjacent network · Low privileges · No interaction · EPSS 0.00866 · Published 2020-03-05 · Partial fix CWE-401
