Red Hat Security Advisory

RHSA-2021:0934

qemu-kvm-rhev security update

Released 2021-03-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 13.0 qemu-img-rhev-10:2.12.0-48.el7_9.2, qemu-kvm-common-rhev-10:2.12.0-48.el7_9.2, qemu-kvm-rhev-10:2.12.0-48.el7_9.2 +1

TI-2020-01899 CVE-2020-1983 · GHSA-m3gw-pxj4-v7p8

LOW 37

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02357 Published 2020-04-22 Partial fix CWE-416

TI-2020-12662 CVE-2020-16092 · GHSA-ffj7-8wcx-cprg

LOW 18

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing.

CVSS 3.1LOW 3.8 Local Low privileges No interaction EPSS 0.00377 Published 2020-08-11 Partial fix CWE-617