Red Hat Security AdvisoryRHSA-2021:2521
virt:8.2 and virt-devel:8.2 security update
Released 2021-06-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Advanced Virtualization CodeReady Builder for RHEL 8.2.1 SLOF-20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.src::virt-devel:8.2, hivex-1.3.18-20.module+el8.2.0+5588+63a201c3.i686::virt-devel:8.2, hivex-devel-1.3.18-20.module+el8.2.0+5588+63a201c3.i686::virt-devel:8.2 +47
- Advanced Virtualization for RHEL 8.2.1 SLOF-20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.noarch::virt:8.2, SLOF-20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.src::virt:8.2, hivex-1.3.18-20.module+el8.2.0+5588+63a201c3.aarch64::virt:8.2 +47
Fixes 2 records
Priority LOW 30
hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00421 · Published 2020-06-02 · Partial fix CWE-119
Priority LOW 27
An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00326 · Published 2021-05-13 · Partial fix CWE-125
