Most recent entries from all

ALSA-2019:3345 — Low: virt:rhel security, bug fix, and enhancement update

Affected: AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: netcf, AlmaLinux:8: netcf-devel, AlmaLinux:8: netcf-libs, AlmaLinux:8: sgabios, AlmaLinux:8: sgabios-bin

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)

* QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)

* QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2020-00700

Withdrawn: BELL-CVE-2019-12155 — CVE-2019-12155 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p…

certfr-2022-avi-267

EUVD-2026-54853

fkie_cve-2019-12155

interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.

GHSA-96vp-7vcr-rp4h

interface_release_resource in hw/display/qxl.c in QEMU 4.0.0 has a NULL pointer dereference.

gsd-2019-12155

RHBA-2019:3723 — Red Hat Bug Fix Advisory: Advanced Virtualization bug fix and enhancement update

libvirt: virsh domhostname command discloses guest hostname in readonly mode ntfs-3g: heap-based buffer overflow leads to local root privilege escalation QEMU: qxl: null pointer dereference while releasing spice resources QEMU: slirp: heap buffer overflow during packet reassembly

RHSA-2019:2607 — Red Hat Security Advisory: qemu-kvm security update

QEMU: qxl: null pointer dereference while releasing spice resources

SUSE-SU-2019:14151-1 — Security update for kvm

Security update for kvm

UBUNTU-CVE-2019-12155

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:16.04:LTS: qemu, Ubuntu:18.04:LTS: qemu, Ubuntu:20.04:LTS: qemu

interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.

WID-SEC-W-2024-1986 — QEMU: Schwachstellen ermöglichen Denial of Service

Ein lokaler Angreifer kann mehrere Schwachstellen in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.