Red Hat Security Advisory

RHSA-2020:4290

virt:8.1 and virt-devel:8.1 security update

Released 2020-10-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Advanced Virtualization CodeReady Builder for RHEL 8.1.1 SLOF-20190703-1.gitba1ab360.module+el8.1.1+5309+6d656f05.src::virt-devel:8.1, hivex-1.3.15-7.module+el8.1.1+5309+6d656f05.i686::virt-devel:8.1, hivex-devel-1.3.15-7.module+el8.1.1+5309+6d656f05.i686::virt-devel:8.1 +47
Advanced Virtualization for RHEL 8.1.1 SLOF-20190703-1.gitba1ab360.module+el8.1.1+5309+6d656f05.noarch::virt:8.1, SLOF-20190703-1.gitba1ab360.module+el8.1.1+5309+6d656f05.src::virt:8.1, hivex-1.3.15-7.module+el8.1.1+5309+6d656f05.aarch64::virt:8.1 +47

TI-2020-01899 CVE-2020-1983 · GHSA-m3gw-pxj4-v7p8

LOW 37

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02357 Published 2020-04-22 Partial fix CWE-416

TI-2020-11232 CVE-2020-14364 · GHSA-fq9g-vccc-q7c7

LOW 31

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0.

CVSS 3.1MEDIUM 5.0 Local High privileges No interaction EPSS 0.05402 Published 2020-08-31 Partial fix CWE-125