Skip to content
OpenAdvisories
High RHSA-2021:0934 2 CVEs

Red Hat Security Advisory: qemu-kvm-rhev security update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 qemu-img-rhev 10:2.12.0-48.el7_9.2
Red Hat · OpenStack 13 openstack:13::el7 qemu-kvm-common-rhev 10:2.12.0-48.el7_9.2
Red Hat · OpenStack 13 openstack:13::el7 qemu-kvm-rhev 10:2.12.0-48.el7_9.2
Red Hat · OpenStack 13 openstack:13::el7 qemu-kvm-rhev-debuginfo 10:2.12.0-48.el7_9.2
Red Hat · OpenStack 13 openstack:13::el7 qemu-kvm-tools-rhev 10:2.12.0-48.el7_9.2

Vulnerabilities 2

  • High 7.5
    CVE-2020-1983

    libslirp: use after free vulnerability cause a denial of service.

    A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

    slirp libslirp qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-16092

    In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e a…

    qemu qemu qemu Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1829825
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1860283
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0934.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-1983
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-1983
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-1983
  • report
    https://access.redhat.com/security/cve/CVE-2020-16092
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-16092
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-16092