Important: virt:rhel security update

2020-06-3013:38:53

errata.almalinux.org

5.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.2%

JSON

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

QEMU: Slirp: potential OOB access due to unsafe snprintf() usages (CVE-2020-8608)
QEMU: vnc: memory leakage upon disconnect (CVE-2019-20382)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8i686libiscsi-utils< 1.18.0-8.module_el8.3.0+2048+e7a0a3ealibiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux8i686netcf-devel< 0.2.8-12.module_el8.3.0+2048+e7a0a3eanetcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux8i686libiscsi-devel< 1.18.0-8.module_el8.3.0+2048+e7a0a3ealibiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux8i686netcf< 0.2.8-12.module_el8.3.0+2048+e7a0a3eanetcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux8i686sgabios< 0.20170427git-3.module_el8.3.0+2048+e7a0a3easgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux8i686netcf-libs< 0.2.8-12.module_el8.3.0+2048+e7a0a3eanetcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux8i686libiscsi< 1.18.0-8.module_el8.3.0+2048+e7a0a3ealibiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux8noarchsgabios-bin< 0.20170427git-3.module_el8.5.0+2608+72063365sgabios-bin-0.20170427git-3.module_el8.5.0+2608+72063365.noarch.rpm
almalinux8x86_64netcf< 0.2.8-12.module_el8.5.0+2608+72063365netcf-0.2.8-12.module_el8.5.0+2608+72063365.x86_64.rpm
almalinux8x86_64sgabios< 0.20170427git-3.module_el8.5.0+2608+72063365sgabios-0.20170427git-3.module_el8.5.0+2608+72063365.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	i686	libiscsi-utils	< 1.18.0-8.module_el8.3.0+2048+e7a0a3ea	libiscsi-utils-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux	8	i686	netcf-devel	< 0.2.8-12.module_el8.3.0+2048+e7a0a3ea	netcf-devel-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux	8	i686	libiscsi-devel	< 1.18.0-8.module_el8.3.0+2048+e7a0a3ea	libiscsi-devel-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux	8	i686	netcf	< 0.2.8-12.module_el8.3.0+2048+e7a0a3ea	netcf-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux	8	i686	sgabios	< 0.20170427git-3.module_el8.3.0+2048+e7a0a3ea	sgabios-0.20170427git-3.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux	8	i686	netcf-libs	< 0.2.8-12.module_el8.3.0+2048+e7a0a3ea	netcf-libs-0.2.8-12.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux	8	i686	libiscsi	< 1.18.0-8.module_el8.3.0+2048+e7a0a3ea	libiscsi-1.18.0-8.module_el8.3.0+2048+e7a0a3ea.i686.rpm
almalinux	8	noarch	sgabios-bin	< 0.20170427git-3.module_el8.5.0+2608+72063365	sgabios-bin-0.20170427git-3.module_el8.5.0+2608+72063365.noarch.rpm
almalinux	8	x86_64	netcf	< 0.2.8-12.module_el8.5.0+2608+72063365	netcf-0.2.8-12.module_el8.5.0+2608+72063365.x86_64.rpm
almalinux	8	x86_64	sgabios	< 0.20170427git-3.module_el8.5.0+2608+72063365	sgabios-0.20170427git-3.module_el8.5.0+2608+72063365.x86_64.rpm