Red Hat Security Advisory

RHSA-2021:2322

qemu-kvm security update

Released 2021-06-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-175.el7_9.4, qemu-kvm-10:1.5.3-175.el7_9.4, qemu-kvm-common-10:1.5.3-175.el7_9.4 +1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-175.el7_9.4, qemu-kvm-10:1.5.3-175.el7_9.4, qemu-kvm-common-10:1.5.3-175.el7_9.4 +1
Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-175.el7_9.4, qemu-kvm-10:1.5.3-175.el7_9.4, qemu-kvm-common-10:1.5.3-175.el7_9.4 +1
Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-175.el7_9.4, qemu-kvm-10:1.5.3-175.el7_9.4, qemu-kvm-common-10:1.5.3-175.el7_9.4 +1

TI-2020-17679 CVE-2020-29443 · GHSA-3q92-j8r6-g6h8

LOW 19

ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated.

CVSS 3.1LOW 3.9 Local High privileges No interaction EPSS 0.00377 Published 2021-01-22 Partial fix CWE-125