Red Hat Security Advisory

RHSA-2022:0081

virt:av and virt-devel:av security and bug fix update

Released 2022-01-11 · Red Hat rating Low · View on Red Hat →

Fixed in

Advanced Virtualization for RHEL 8.5.0.Z SLOF-20210217-1.module+el8.5.0+10946+35bb3930.noarch::virt:av, SLOF-20210217-1.module+el8.5.0+10946+35bb3930.src::virt-devel:av, SLOF-20210217-1.module+el8.5.0+10946+35bb3930.src::virt:av +47

TI-2021-03549 CVE-2021-20257 · GHSA-j586-x8f6-9xf2

LOW 29

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.0037 Published 2022-03-16 Partial fix CWE-835

TI-2021-02837 CVE-2021-3930 · GHSA-2v9g-p8fq-vvh2

LOW 29

An off-by-one error was found in the SCSI device emulation in QEMU.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00338 Published 2022-02-18 Partial fix CWE-193