Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 454
Alerts This Week
Warning Icon 1 454

SUSE 11-SP4-LTSS: 2021:14772-1 Important: KVM Security Update

suse
Calendar Grey August 3, 2021
Dist Suse Esm H88
Debian Security Notice regarding OpenSSH resolves 6 security flaws, bolstering protection for affected installations. Upgrade ready immediately.
An update that fixes 8 vulnerabilities is now available

Summary

This update for kvm fixes the following issues: - CVE-2021-3594: invalid pointer initialization may lead to information disclosure in slirp (udp) (bsc#1187367) - CVE-2021-3592: invalid pointer initialization may lead to information disclosure (bootp). (bsc#1187364) - CVE-2021-3416: infinite loop in loopback mode may lead to stack overflow. (bsc#1186473) - CVE-2020-15469: MMIO ops null pointer dereference may lead to DoS. (bsc#1173612) - CVE-2020-11947: iscsi_aio_ioctl_cb in block/iscsi.c has a heap-based buffer over-read. (bsc#1180523) - CVE-2021-20221: out-of-bound heap buffer access via an interrupt ID field. (bsc#1181933) - CVE-2020-25707: infinite loop in e1000e_write_packet_to_guest() in hw/net/e1000e_core.c. (bsc#1178683)

Topics%20covered

Topics Covered

security advisory DoS important heap overflow information disclosure stack overflow kvm

References

#1173612 #1174386 #1178683 #1180523 #1181933

#1186473 #1187364 #1187367

Cross- CVE-2020-11947 CVE-2020-15469 CVE-2020-15863

CVE-2020-25707 CVE-2021-20221 CVE-2021-3416

CVE-2021-3592 CVE-2021-3594

CVSS scores:

CVE-2020-11947 (NVD) : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CVE-2020-11947 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2020-15469 (NVD) : 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

CVE-2020-15469 (SUSE): 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

CVE-2020-15863 (NVD) : 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CVE-2020-15863 (SUSE): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVE-2020-25707 (SUSE): 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:14772-1
Rating: important

Topics%20covered

Topics Covered

security advisory DoS important heap overflow information disclosure stack overflow kvm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.