Lucene search

K
redhatRedHatRHSA-2021:2521
HistoryJun 22, 2021 - 1:35 p.m.

(RHSA-2021:2521) Moderate: virt:8.2 and virt-devel:8.2 security update

2021-06-2213:35:00
access.redhat.com
81

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

14.2%

The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.

Security Fix(es):

  • QEMU: msix: OOB access during mmio operations may lead to DoS (CVE-2020-13754)

  • qemu: out-of-bound heap buffer access via an interrupt ID field (CVE-2021-20221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyx86_64libnbd-debuginfo< 1.2.2-1.module+el8.2.0+5644+32ac38d4libnbd-debuginfo-1.2.2-1.module+el8.2.0+5644+32ac38d4.x86_64.rpm
RedHatanyppc64lelibvirt-libs-debuginfo< 6.0.0-25.5.module+el8.2.1+8680+ea98947blibvirt-libs-debuginfo-6.0.0-25.5.module+el8.2.1+8680+ea98947b.ppc64le.rpm
RedHatanyx86_64ocaml-libnbd-debuginfo< 1.2.2-1.module+el8.2.0+5644+32ac38d4ocaml-libnbd-debuginfo-1.2.2-1.module+el8.2.0+5644+32ac38d4.x86_64.rpm
RedHatanys390xnbdkit-ssh-plugin-debuginfo< 1.16.2-4.module+el8.2.1+6710+effcb1dfnbdkit-ssh-plugin-debuginfo-1.16.2-4.module+el8.2.1+6710+effcb1df.s390x.rpm
RedHatanys390xlibiscsi-utils-debuginfo< 1.18.0-8.module+el8.2.0+4793+b09dd2fblibiscsi-utils-debuginfo-1.18.0-8.module+el8.2.0+4793+b09dd2fb.s390x.rpm
RedHatanys390xswtpm-devel< 0.2.0-2.20200127gitff5a83b.module+el8.2.0+5579+d71178e0swtpm-devel-0.2.0-2.20200127gitff5a83b.module+el8.2.0+5579+d71178e0.s390x.rpm
RedHatanys390xswtpm-tools< 0.2.0-2.20200127gitff5a83b.module+el8.2.0+5579+d71178e0swtpm-tools-0.2.0-2.20200127gitff5a83b.module+el8.2.0+5579+d71178e0.s390x.rpm
RedHatanys390xocaml-libguestfs< 1.40.2-24.module+el8.2.1+7154+47ffd890ocaml-libguestfs-1.40.2-24.module+el8.2.1+7154+47ffd890.s390x.rpm
RedHatanyx86_64libguestfs-tools-c< 1.40.2-24.module+el8.2.1+7154+47ffd890libguestfs-tools-c-1.40.2-24.module+el8.2.1+7154+47ffd890.x86_64.rpm
RedHatanys390xvirglrenderer-test-server< 0.8.2-1.module+el8.2.0+5777+d9c2af8cvirglrenderer-test-server-0.8.2-1.module+el8.2.0+5777+d9c2af8c.s390x.rpm
Rows per page:
1-10 of 8951

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

14.2%