Most recent entries from all

ALSA-2020:1358 — Important: virt:rhel security and bug fix update

Affected: AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: netcf, AlmaLinux:8: netcf-devel, AlmaLinux:8: netcf-libs, AlmaLinux:8: sgabios, AlmaLinux:8: sgabios-bin

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server (CVE-2020-1711)

* QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* libvirtd: error : virCPUx86UpdateLive:3110 : operation failed: guest CPU doesn't match specification: missing features: fxsr_opt (BZ#1809510)

bdu:2020-05682

Withdrawn: BELL-CVE-2020-1711 — CVE-2020-1711 does not affect BellSoft software

Withdrawn by the publisher.

cnvd-2020-10714

EUVD-2026-35575

fkie_cve-2020-1711

An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Block (LBA) in an iscsi_co_block_status() routine. A remote user could use this flaw to crash the QEMU process, resulting in a denial of service or potential execution of arbitrary code with privileges of the QEMU process on the host.

GHSA-8gvc-95pj-x5r8

An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.x.x up to and including 2.12.0 handled a response coming from an iSCSI server while checking the status of a Logical Address Block (LBA) in an iscsi_co_block_status() routine. A remote user could use this flaw to crash the QEMU process, resulting in a denial of service or potential execution of arbitrary code with privileges of the QEMU process on the host.

gsd-2020-1711

msrc_CVE-2020-1711 — An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2…

msrc_CVE-2020-1711

RHSA-2020:0669 — Red Hat Security Advisory: qemu-kvm-ma security update

QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server

RHSA-2020:1358 — Red Hat Security Advisory: virt:rhel security and bug fix update

QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()

SUSE-SU-2020:1514-1 — Security update for qemu

Security update for qemu

UBUNTU-CVE-2020-1711

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:16.04:LTS: qemu, Ubuntu:18.04:LTS: qemu, Ubuntu:20.04:LTS: qemu

WID-SEC-W-2024-1983 — QEMU: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in QEMU ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.