Summary
[1.5.3-175.el7_9.4]
- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
(CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | qemu-img | 10:1.5.3-175.el7_9.4 |
| Oracle Linux · 7 | qemu-kvm | 10:1.5.3-175.el7_9.4 |
| Oracle Linux · 7 | qemu-kvm-common | 10:1.5.3-175.el7_9.4 |
| Oracle Linux · 7 | qemu-kvm-tools | 10:1.5.3-175.el7_9.4 |
Vulnerabilities 1
-
Unscored —
ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not …