Summary
[1.5.3-160.el7_6.3]
- kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1669067]
- kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669067]
- kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669067]
- kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669067]
- Resolves: bz#1669067
(CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-7.6.z])
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | qemu-img | 10:1.5.3-160.el7_6.3 |
| Oracle Linux · 7 | qemu-kvm | 10:1.5.3-160.el7_6.3 |
| Oracle Linux · 7 | qemu-kvm-common | 10:1.5.3-160.el7_6.3 |
| Oracle Linux · 7 | qemu-kvm-tools | 10:1.5.3-160.el7_6.3 |
Vulnerabilities 1
-
Unscored —
In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.