Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE: 2021:14704-1 Important: kvm DoS and Access Issues

suse
Calendar Grey April 20, 2021
Scroller Suse
SUSE Security Patch resolves 15 high-severity vulnerabilities in kvm, enhancing system robustness and safeguarding against potential threats.
An update that fixes 15 vulnerabilities is now available

Summary

This update for kvm fixes the following issues: - Fix OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c (CVE-2020-12829, bsc#1172385) - Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383) - Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934) - Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673) - Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682) - Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684) - Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108) - Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577) - Fix OOB access in SLIRP ARP packet processing (CVE-2020-29130, bsc#1179467)

Topics%20covered

Topics Covered

security advisory DoS access issue patch important kvm SUSE Linux Enterprise

References

#1172383 #1172384 #1172385 #1172478 #1175441

#1176673 #1176682 #1176684 #1178934 #1179467

#1181108 #1182137 #1182425 #1182577

Cross- CVE-2014-3689 CVE-2015-1779 CVE-2020-12829

CVE-2020-13361 CVE-2020-13362 CVE-2020-13765

CVE-2020-14364 CVE-2020-25084 CVE-2020-25624

CVE-2020-25625 CVE-2020-25723 CVE-2020-29130

CVE-2020-29443 CVE-2021-20181 CVE-2021-20257

CVSS scores:

CVE-2015-1779 (NVD) : 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CVE-2020-12829 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2020-12829 (SUSE): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVE-2020-13361 (NVD) : 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L

CVE-2020-13361 (SUSE): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:14704-1
Rating: important

Topics%20covered

Topics Covered

security advisory DoS access issue patch important kvm SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.