Red Hat Security Advisory: qemu-kvm security update
An update for qemu-kvm is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-14364US | medium5.0 | Exploit | ||
An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (24)
- Behobenqemu-img-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
https://access.redhat.com/errata/RHSA-2020:4052 - Behobenqemu-img-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
https://access.redhat.com/errata/RHSA-2020:4052 - Behobenqemu-kvm-10:1.5.3-160.el7_6.8.src as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
https://access.redhat.com/errata/RHSA-2020:4052 - Behobenqemu-kvm-10:1.5.3-160.el7_6.8.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
https://access.redhat.com/errata/RHSA-2020:4052 - Behobenqemu-kvm-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
https://access.redhat.com/errata/RHSA-2020:4052 - Behobenqemu-kvm-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
https://access.redhat.com/errata/RHSA-2020:4052 - Behobenqemu-kvm-common-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
https://access.redhat.com/errata/RHSA-2020:4052 - Behobenqemu-kvm-common-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
https://access.redhat.com/errata/RHSA-2020:4052 - Behobenqemu-kvm-debuginfo-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
https://access.redhat.com/errata/RHSA-2020:4052 - Behobenqemu-kvm-debuginfo-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
https://access.redhat.com/errata/RHSA-2020:4052 - Behobenqemu-kvm-tools-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
https://access.redhat.com/errata/RHSA-2020:4052 - Behobenqemu-kvm-tools-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
https://access.redhat.com/errata/RHSA-2020:4052 - Workaroundqemu-img-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-img-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-10:1.5.3-160.el7_6.8.src as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-10:1.5.3-160.el7_6.8.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-common-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-common-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-debuginfo-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-debuginfo-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-tools-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundqemu-kvm-tools-10:1.5.3-160.el7_6.8.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan