CVE-2020-14415 affecting package qemu-kvm 4.2.0-48

CVE-2020-14415 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-14415

osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...

CVE-2020-14415

osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...

CVE-2020-14415

Technical details are not publicly provided in the supplied documents. The VULN is described (QEMU oss_write prior to 5.0.0), but no affected versions, impact, or fixes are detailed here — monitor for updates.

CVE-2020-14415

osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...

USN-4467-1: QEMU vulnerabilities

Ziming Zhang and VictorV discovered that the QEMU SLiRP networking implementation incorrectly handled replying to certain ICMP echo requests. An attacker inside a guest could possibly use this issue to leak host memory to obtain sensitive information. This issue only affected Ubuntu 18.04 LTS...

CVE-2020-14415

osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...