RHSA-2020:1216HighCVSS 7.0
Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update
🔗 CVE IDs covered (3)
📋 Description
CVE-2019-12155 — QEMU: qxl: null pointer dereference while releasing spice resources CVE-2019-14378 — QEMU: slirp: heap buffer overflow during packet reassembly CVE-2020-1711 — QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server
🔗 References (16)
- selfhttps://access.redhat.com/errata/RHSA-2020:1216
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1648622
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1665256
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1711643
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1712670
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1721522
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1724048
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1734502
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1734745
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1743365
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1746224
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1764120
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1775251
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1794290
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1216.json