CVE-2020-11102 affecting package qemu-kvm 4.2.0-48

CVE-2020-11102 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2019-20175 affecting package qemu-kvm 4.2.0-48

CVE-2019-20175 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-16092 affecting package qemu-kvm 4.2.0-48

CVE-2020-16092 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2015-7504 affecting package qemu-kvm 4.2.0-13

CVE-2015-7504 affecting package qemu-kvm 4.2.0-13. A patched version of the package is available...

CVE-2020-7039 affecting package qemu-kvm 4.2.0-48

CVE-2020-7039 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-13659 affecting package qemu-kvm 4.2.0-48

CVE-2020-13659 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-1711 affecting package qemu-kvm 4.2.0-48

CVE-2020-1711 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

CVE-2020-7211 affecting package qemu-kvm 4.2.0-48

CVE-2020-7211 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

Out Of Bound Writes (OOB)

kernel-rt is vulnerable to out of bound writes attacks. A user or process able to access the /dev/kvm device could use this flaw to crash the system, resulting in a denial of service...

Moderate: Red Hat Security Advisory: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

An update for the virt:rhel and virt-devel:rhel modules is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Kernel: kvm: OOB memory write via kvm_dev_ioctl_get_cpuid

An out-of-bounds memory write issue was found in the way the Linux kernel's KVM hypervisor handled the 'KVMGETEMULATEDCPUID' ioctl2 request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulti...

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2020-2392)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2020:4676)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4676 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contai...

RLSA-2020:4676 Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting wi...

ALSA-2020:4676 Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

EulerOS 2.0 SP2 : qemu-kvm (EulerOS-SA-2020-2392)

According to the versions of the qemu-kvm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - QEMU 4.1.0 has a memory leak in zrlecompressdata in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a...

Security Bulletin: Vulnerabilities in OpenSSL affect LCM8 & LCM16 KVM Switch Firmware and GCM16 & GCM32 KVM Switch Firmware (CVE-2015-3193, CVE-2015-3194, CVE-2015-3195, CVE-2015-3196, CVE-2015-1794)

Summary OpenSSL vulnerabilities were disclosed on December 3, 2015 by the OpenSSL Project. OpenSSL is used by LCM8 and LCM16 KVM Switch Firmware and GCM16 and GCM32 KVM Switch Firmware. LCM8 and LCM16 KVM Switch Firmware and GCM16 and GCM32 KVM Switch Firmware have addressed the applicable CVEs...

EulerOS Virtualization 3.0.2.2 : qemu-kvm (EulerOS-SA-2020-2200)

According to the version of the qemu-kvm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The qemu-nbd server in QEMU aka Quick Emulator, when built with the Network Block Device NBD Server support, allows remote attacke...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20201001)

Security Fixes : - QEMU: usb: out-of-bounds r/w access issue while processing usb packets CVE-2020-14364 - QEMU: slirp: use-after-free in ipreass function in ipinput.c CVE-2020-1983 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...