Red Hat Security Advisory

RHSA-2021:0346

qemu-kvm-ma security update

Released 2021-02-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) qemu-img-ma-10:2.12.0-48.el7_9.2, qemu-kvm-common-ma-10:2.12.0-48.el7_9.2, qemu-kvm-ma-10:2.12.0-48.el7_9.2 +1
Red Hat Enterprise Linux Server Optional (v. 7) qemu-kvm-common-ma-10:2.12.0-48.el7_9.2, qemu-kvm-ma-10:2.12.0-48.el7_9.2, qemu-kvm-tools-ma-10:2.12.0-48.el7_9.2

TI-2020-01899 CVE-2020-1983 · GHSA-m3gw-pxj4-v7p8

LOW 37

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02357 Published 2020-04-22 Partial fix CWE-416

TI-2020-12662 CVE-2020-16092 · GHSA-ffj7-8wcx-cprg

LOW 18

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing.

CVSS 3.1LOW 3.8 Local Low privileges No interaction EPSS 0.00377 Published 2020-08-11 Partial fix CWE-617