Most recent entries from all

ALSA-2019:3345 — Low: virt:rhel security, bug fix, and enhancement update

Affected: AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: netcf, AlmaLinux:8: netcf-devel, AlmaLinux:8: netcf-libs, AlmaLinux:8: sgabios, AlmaLinux:8: sgabios-bin

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)

* QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)

* QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2019-02736

Withdrawn: BELL-CVE-2019-9824 — CVE-2019-9824 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2020-avi-015 — De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un atta…

certfr-2020-avi-015

cnvd-2019-07886

EUVD-2026-53127

fkie_cve-2019-9824

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

GHSA-hx33-mww2-6mf5

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

gsd-2019-9824

RHSA-2019:1650 — Red Hat Security Advisory: qemu-kvm security update

QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables

RHSA-2019:2078 — Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables

SUSE-SU-2019:0825-1 — Security update for xen

Security update for xen

UBUNTU-CVE-2019-9824

Affected: Ubuntu:14.04:LTS: qemu, Ubuntu:16.04:LTS: qemu, Ubuntu:18.04:LTS: qemu

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

WID-SEC-W-2024-1989 — QEMU: Schwachstelle ermöglicht Offenlegung von Informationen

Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um Informationen offenzulegen.