Summary
[1.5.3-173.el7_8.1]
- kvm-util-add-slirp_fmt-helpers.patch [bz#1798970]
- kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798970]
- Resolves: bz#1798970
(CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.8.z])
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | qemu-img | 10:1.5.3-173.el7_8.1 |
| Oracle Linux · 7 | qemu-kvm | 10:1.5.3-173.el7_8.1 |
| Oracle Linux · 7 | qemu-kvm-common | 10:1.5.3-173.el7_8.1 |
| Oracle Linux · 7 | qemu-kvm-tools | 10:1.5.3-173.el7_8.1 |
Vulnerabilities 1
-
Unscored —
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in la…