Red Hat Security Advisory

RHSA-2021:0459

qemu-kvm-rhev security update

Released 2021-02-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHV-M 4.3 qemu-img-rhev-10:2.12.0-48.el7_9.2, qemu-kvm-common-rhev-10:2.12.0-48.el7_9.2, qemu-kvm-rhev-10:2.12.0-48.el7_9.2 +1
Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts qemu-img-rhev-10:2.12.0-48.el7_9.2, qemu-kvm-common-rhev-10:2.12.0-48.el7_9.2, qemu-kvm-rhev-10:2.12.0-48.el7_9.2 +1

TI-2020-01899 CVE-2020-1983 · GHSA-m3gw-pxj4-v7p8

LOW 37

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02357 Published 2020-04-22 Partial fix CWE-416

TI-2020-12662 CVE-2020-16092 · GHSA-ffj7-8wcx-cprg

LOW 18

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing.

CVSS 3.1LOW 3.8 Local Low privileges No interaction EPSS 0.00377 Published 2020-08-11 Partial fix CWE-617