CentOS 8 : container-tools:rhel8 (CESA-2019:3403)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3403 advisory. - containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure CVE-2019-10214 - QEM...

Important: qemu-kvm

Issue Overview: qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service guest crash by leveraging mishandling of the seccomp policy for threads other than the main thread. CVE-2018-15746 A heap buffer overflow issue was found in the SLiRP networking implementation of...

Huawei EulerOS: Security Advisory for dpdk (EulerOS-SA-2020-2308)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for dpdk (openSUSE-SU-2020:1593-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-14378

An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...

CVE-2020-14378

The advisory data confirms CVE-2020-14378 affects DPDK, specifically an integer underflow in move_desc that can cause a long-running loop and CPU exhaustion. Exposures include DPDK versions before 18.11.10 and before 19.11.5, with potential impact on vhost_crypto workloads that may block VMs/netw...

NewStart CGSL MAIN 4.05 : qemu-kvm Multiple Vulnerabilities (NS-SA-2020-0049)

The remote NewStart CGSL host, running version MAIN 4.05, has qemu-kvm packages installed that are affected by multiple vulnerabilities: - libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c. CVE-2019-15890 - ipreass in ipinput.c in libslirp 4.0.0 has a heap-based...

Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2020-1880)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: qemu-kvm-rhev bug fix update

An update for qemu-kvm-rhev is now available for Red Hat Virtualization for Red Hat Virtualization Host 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Important: Red Hat Security Advisory: qemu-kvm security update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

RHEL 7 : qemu-kvm-ma (RHSA-2020:2065)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2065 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-ma packages provide the...

Important: Red Hat Security Advisory: qemu-kvm-ma security update

An update for qemu-kvm-ma is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

EulerOS 2.0 SP3 : qemu-kvm (EulerOS-SA-2020-1430)

According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libslirp 4.1.0, as used in QEMU 4.2.0, tcpsubr.c misuses snprintf return values, leading to a buffer overflow in later code.CVE-2020-8608 -...

CVE-2019-14378

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the ipreass routine while reassembling incoming packets if the first fragment is bigger than the m-mdat buffer. An attacker could use this flaw to crash the QEMU process on the...

qemu-kvm security, bug fix, and enhancement update

1.5.3-173.el7 - kvm-tcpemu-Fix-oob-access.patch bz1791560 - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch bz1791560 - kvm-slirp-use-correct-size-while-emulating-commands.patch bz1791560 - Resolves: bz1791560 CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tc...

Important: Red Hat Security Advisory: slirp4netns security update

An update for slirp4netns is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

qemu security update

15:3.1.0-7.el7 - qemu-img: Add --target-is-zero to convert David Edmondson 15:3.1.0-6.el7 - qemu.spec: Remove 'BuildRequires: kernel' Karl Heubaum Orabug: 30858754 - target/i386: add support for MSRIA32TSXCTRL Paolo Bonzini Orabug: 30652327 - iscsi: Cap block count from GET LBA STATUS CVE-2020-17...

OracleVM 3.4 : qemu-kvm (OVMSA-2020-0010)

The remote OracleVM system is missing necessary patches to address critical security updates : - kvm-Fix-heap-overflow-in-ipreass-on-big-packet-input.pa tch bz1734747 - kvm-Using-ipdeq-after-mfree-might-read-pointers-from-a .patch - kvm-tcpemu-Fix-oob-access.patch bz1791558 -...

CentOS: Security Advisory for qemu-guest-agent (CESA-2020:0775)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20200310)

Security Fixes : - QEMU: slirp: heap buffer overflow during packet reassembly CVE-2019-14378 - QEMU: slirp: OOB buffer access while emulating tcp protocols in tcpemu CVE-2020-7039 - QEMU: Slirp: use-after-free during packet reassembly CVE-2019-15890 C Tenable Network Security, Inc. The descriptiv...