Skip to content
OpenAdvisories
High ALAS2-2020-1467 1 CVE

Important: qemu security update (Amazon Linux 2)

Published Jul 21, 2020 · Updated Sep 23, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-8608: In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code. 1798453: CVE-2020-8608 QEMU: Slirp: potential OOB access due to unsafe snprintf() usages

Fixed packages 28

ReleasePackageFixed in
Amazon Linux · 2 ivshmem-tools 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-audio-alsa 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-audio-oss 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-audio-pa 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-audio-sdl 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-block-curl 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-block-dmg 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-block-iscsi 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-block-nfs 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-block-rbd 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-block-ssh 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-common 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-debuginfo 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-guest-agent 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-img 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-kvm 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-kvm-core 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-system-aarch64 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-system-aarch64-core 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-system-x86 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-system-x86-core 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-ui-curses 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-ui-gtk 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-ui-sdl 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-user 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-user-binfmt 10:3.1.0-8.amzn2.0.3
Amazon Linux · 2 qemu-user-static 10:3.1.0-8.amzn2.0.3

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2020-8608.html