Red Hat Security Advisory: qemu-kvm-rhev security update
An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 13 (Queens). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-14364US | medium5.0 | Exploit | ||
An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevi… | ||||
| CVE-2019-20382US | low3.5 | — | ||
QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated i… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2020:4167self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 1810390external
- 1856805external
- 1869201external
- Canonical URLself
remediations (51)
- Fixedqemu-img-rhev-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-img-rhev-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-img-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-img-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-img-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-img-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-common-rhev-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-common-rhev-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-common-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-common-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-common-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-common-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-10:2.12.0-18.el7_6.12.src as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-10:2.12.0-18.el7_6.12.src as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-10:2.12.0-48.el7_9.1.src as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-10:2.12.0-48.el7_9.1.src as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-debuginfo-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-debuginfo-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-debuginfo-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-debuginfo-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-debuginfo-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-rhev-debuginfo-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-tools-rhev-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-tools-rhev-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-tools-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-tools-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-tools-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Fixedqemu-kvm-tools-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4167 - Workaroundqemu-img-rhev-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-img-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-img-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-common-rhev-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-common-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-common-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-10:2.12.0-18.el7_6.12.src as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-10:2.12.0-48.el7_9.1.src as a component of Red Hat OpenStack Platform 13.0
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-debuginfo-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-debuginfo-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-rhev-debuginfo-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-tools-rhev-10:2.12.0-18.el7_6.12.x86_64 as a component of Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-tools-rhev-10:2.12.0-48.el7_9.1.ppc64le as a component of Red Hat OpenStack Platform 13.0
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-tools-rhev-10:2.12.0-48.el7_9.1.x86_64 as a component of Red Hat OpenStack Platform 13.0
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan