Red Hat Security AdvisoryRHSA-2020:4059
virt:rhel security update
Released 2020-09-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) SLOF-20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab.src::virt-devel:rhel, hivex-1.3.15-7.module+el8.1.0+4066+0f1aadab.i686::virt-devel:rhel, hivex-devel-1.3.15-7.module+el8.1.0+4066+0f1aadab.i686::virt-devel:rhel +47
- Red Hat Enterprise Linux AppStream (v. 8) SLOF-20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab.noarch::virt:rhel, SLOF-20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab.src::virt:rhel, hivex-1.3.15-7.module+el8.1.0+4066+0f1aadab.aarch64::virt:rhel +47
Fixes 2 records
Priority LOW 31
An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0.
CVSS 3.1MEDIUM 5.0· Local · High privileges · No interaction · EPSS 0.05402 · Published 2020-08-31 · Partial fix CWE-125
Priority LOW 29
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.0051 · Published 2020-07-09 · Partial fix · 4.3.1 CWE-125