Most recent entries from all

ALSA-2020:4059 — Important: virt:rhel security update

Affected: AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: netcf, AlmaLinux:8: netcf-devel, AlmaLinux:8: netcf-libs, AlmaLinux:8: sgabios, AlmaLinux:8: sgabios-bin

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: usb: out-of-bounds r/w access issue while processing usb packets (CVE-2020-14364)

* QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2021-00072

Withdrawn: BELL-CVE-2020-14364 — CVE-2020-14364 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2020-avi-525 — Une vulnérabilité a été découverte dans Xen. Elle permet à un attaquant de provoquer une exécution de code arbitraire à…

certfr-2020-avi-525

cnvd-2020-61967

EUVD-2026-42411

fkie_cve-2020-14364

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

GHSA-fq9g-vccc-q7c7

gsd-2020-14364

msrc_CVE-2020-14364 — An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue…

msrc_CVE-2020-14364

RHSA-2020:4047 — Red Hat Security Advisory: qemu-kvm-ma security update

QEMU: usb: out-of-bounds r/w access issue while processing usb packets

RHSA-2020:4059 — Red Hat Security Advisory: virt:rhel security update

QEMU: slirp: networking out-of-bounds read information disclosure vulnerability QEMU: usb: out-of-bounds r/w access issue while processing usb packets

SUSE-SU-2020:14521-1 — Security update for xen

Security update for xen

UBUNTU-CVE-2020-14364

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:16.04:LTS: qemu, Ubuntu:18.04:LTS: qemu, Ubuntu:20.04:LTS: qemu

WID-SEC-W-2024-1973 — QEMU, Xen und Citrix Hypervisor: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Die…

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in QEMU, Xen und Citrix Hypervisor ausnutzen, um einen Denial of Service Angriff durchzuführen oder möglicherweise beliebigen Programmcode mit den Rechten des Dienstes auszuführen.