Red Hat Security AdvisoryRHSA-2021:0648
virt:8.2 and virt-devel:8.2 security update
Released 2021-02-23 · Red Hat rating Low · View on Red Hat →
Fixed in
- Advanced Virtualization CodeReady Builder for RHEL 8.2.1 SLOF-20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.src::virt-devel:8.2, hivex-1.3.18-20.module+el8.2.0+5588+63a201c3.i686::virt-devel:8.2, hivex-devel-1.3.18-20.module+el8.2.0+5588+63a201c3.i686::virt-devel:8.2 +47
- Advanced Virtualization for RHEL 8.2.1 SLOF-20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.noarch::virt:8.2, SLOF-20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.src::virt:8.2, hivex-1.3.18-20.module+el8.2.0+5588+63a201c3.aarch64::virt:8.2 +47
Fixes 2 records
Priority LOW 19
iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.
CVSS 3.1LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00473 · Published 2020-12-31 · Partial fix CWE-125
Priority LOW 16
A reachable assertion issue was found in the USB EHCI emulation code of QEMU.
CVSS 3.1LOW 3.2· Local · High privileges · No interaction · EPSS 0.00365 · Published 2020-12-02 · Partial fix CWE-617
