Red Hat Security Advisory: qemu-kvm-rhev security update
An update for qemu-kvm-rhev is now available for Red Hat Virtualization for Red Hat Virtualization Host 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-14364US | medium5.0 | Exploit | ||
An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevi… | ||||
references
External citations — patches, advisories, analysis.
remediations (34)
- Fixedqemu-img-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-img-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of RHV-M 4.3
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-img-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-common-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-common-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of RHV-M 4.3
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-common-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-rhev-10:2.12.0-48.el7_9.1.src as a component of RHV-M 4.3
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-rhev-10:2.12.0-48.el7_9.1.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of RHV-M 4.3
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-rhev-debuginfo-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-rhev-debuginfo-10:2.12.0-48.el7_9.1.x86_64 as a component of RHV-M 4.3
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-rhev-debuginfo-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-tools-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-tools-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of RHV-M 4.3
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Fixedqemu-kvm-tools-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4111 - Workaroundqemu-img-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-img-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of RHV-M 4.3
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-img-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-common-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-common-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of RHV-M 4.3
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-common-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-10:2.12.0-48.el7_9.1.src as a component of RHV-M 4.3
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-10:2.12.0-48.el7_9.1.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of RHV-M 4.3
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-debuginfo-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-debuginfo-10:2.12.0-48.el7_9.1.x86_64 as a component of RHV-M 4.3
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-debuginfo-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-tools-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-tools-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of RHV-M 4.3
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-tools-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan