Most recent entries from all

ALSA-2020:0348 — Important: container-tools:rhel8 security, bug fix, and enhancement update

Affected: AlmaLinux:8: cockpit-podman, AlmaLinux:8: containernetworking-plugins, AlmaLinux:8: python-podman-api, AlmaLinux:8: udica

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2020-01447

certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p…

certfr-2022-avi-267

EUVD-2026-37678

fkie_cve-2020-7039

tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code.

GHSA-fr8m-vw66-8v9r

gsd-2020-7039

msrc_CVE-2020-7039 — tcp_emu in tcp_subr.c in libslirp 4.1.0 as used in QEMU 4.2.0 mismanages memory as demonstrated by IRC DCC commands in…

msrc_CVE-2020-7039

RHBA-2020:0390 — Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.1 packages update

golang: invalid public key causes panic in dsa.Verify QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host

RHSA-2020:0348 — Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

QEMU: Slirp: use-after-free during packet reassembly QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()

SUSE-SU-2020:14396-1 — Security update for kvm

Security update for kvm

UBUNTU-CVE-2020-7039

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:14.04:LTS: slirp, Ubuntu:16.04:LTS: qemu, Ubuntu:16.04:LTS: slirp, Ubuntu:18.04:LTS: qemu, Ubuntu:18.04:LTS: slirp

WID-SEC-W-2024-3379 — QEMU: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in QEMU ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.