TI-2019-11942 CVE-2019-15890 · GHSA-2237-w692-94pv
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.
Priority MEDIUM 40
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.
RHSA-2020:4676
virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.src::virt-devel:rhel, hivex-1.3.18-20.module+el8.3.0+6423+e4cb6418.i686::virt-devel:rhel, hivex-devel-1.3.18-20.module+el8.3.0+6423+e4cb6418.i686::virt-devel:rhel +47
- Red Hat Enterprise Linux AppStream (v. 8) SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.noarch::virt:rhel, SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.src::virt:rhel, hivex-1.3.18-20.module+el8.3.0+6423+e4cb6418.aarch64::virt:rhel +47
Fixes 6 records
TI-2020-11210 CVE-2020-14339 · GHSA-c772-g5j9-w9w8
A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control`…
Priority LOW 38
A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process.
TI-2020-01899 CVE-2020-1983 · GHSA-m3gw-pxj4-v7p8
libslirp: use after free vulnerability cause a denial of service.
Priority LOW 37
A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
TI-2020-08604 CVE-2020-10703 · GHSA-c69p-28r6-q952
NULL pointer dereference in libvirt
Priority LOW 33
A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its target path.
TI-2020-11172 CVE-2020-14301 · GHSA-5qrf-45p7-8vrc
An information disclosure vulnerability was found in libvirt in versions before 6.3.0.
Priority LOW 31
An information disclosure vulnerability was found in libvirt in versions before 6.3.0.
TI-2019-14711 CVE-2019-20485 · GHSA-9283-64xm-984q
qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during…
Priority LOW 27
qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage).