Red Hat Security AdvisoryRHSA-2021:1762
virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.src::virt-devel:rhel, hivex-1.3.18-20.module+el8.3.0+6423+e4cb6418.i686::virt-devel:rhel, hivex-devel-1.3.18-20.module+el8.3.0+6423+e4cb6418.i686::virt-devel:rhel +47
- Red Hat Enterprise Linux AppStream (v. 8) SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.noarch::virt:rhel, SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.src::virt:rhel, hivex-1.3.18-20.module+el8.3.0+6423+e4cb6418.aarch64::virt:rhel +47
Fixes 9 records
Priority LOW 30
A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00529 · Published 2020-10-06 · Partial fix CWE-415
Priority LOW 27
A flaw was found in the memory management API of QEMU during the initialization of a memory region cache.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00364 · Published 2020-12-08 · Partial fix · 5.2.0 CWE-787
Priority LOW 26
hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00662 · Published 2020-12-04 · Partial fix CWE-835
Priority LOW 24
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01888 · Published 2020-11-26 · Partial fix CWE-125
Priority LOW 23
ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0146 · Published 2020-11-26 · Partial fix CWE-125
Priority LOW 19
ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated.
CVSS 3.1LOW 3.9· Local · High privileges · No interaction · EPSS 0.00377 · Published 2021-01-22 · Partial fix CWE-125
Priority LOW 19
iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.
CVSS 3.1LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00473 · Published 2020-12-31 · Partial fix CWE-125
Priority LOW 18
In QEMU through 5.0.0, an assertion failure can occur in the network packet processing.
CVSS 3.1LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00377 · Published 2020-08-11 · Partial fix CWE-617
Priority LOW 16
A reachable assertion issue was found in the USB EHCI emulation code of QEMU.
CVSS 3.1LOW 3.2· Local · High privileges · No interaction · EPSS 0.00365 · Published 2020-12-02 · Partial fix CWE-617
THREATIST.IORead the docs