Red Hat Security AdvisoryRHSA-2021:3061
virt:rhel and virt-devel:rhel security and bug fix update
Released 2021-08-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.src::virt-devel:rhel, hivex-1.3.18-21.module+el8.4.0+10770+19c037f9.i686::virt-devel:rhel, hivex-devel-1.3.18-21.module+el8.4.0+10770+19c037f9.i686::virt-devel:rhel +47
- Red Hat Enterprise Linux AppStream (v. 8) SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.noarch::virt:rhel, SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.src::virt:rhel, hivex-1.3.18-21.module+el8.4.0+10770+19c037f9.aarch64::virt:rhel +47
Fixes 5 records
Priority LOW 34
eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02639 · Published 2020-11-06 · Partial fix CWE-617
Priority LOW 30
hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00421 · Published 2020-06-02 · Partial fix CWE-119
Priority LOW 28
A flaw was found in the hivex library in versions before 1.3.20.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.01849 · Published 2021-05-11 · Partial fix CWE-125
Priority LOW 27
An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00326 · Published 2021-05-13 · Partial fix CWE-125
Priority LOW 27
A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00459 · Published 2021-03-18 · Partial fix CWE-835
THREATIST.IORead the docs