ALINUX2-SA-2020%3A0007

ALINUX2-SA-2020%3A0007 PUBLISHED CVSS 2.799999952316284 LOW

Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2018-17963: qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact. CVE-2019-6501: In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

Risk Scores

CVSS 3.0

2.799999952316284

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N

Affected Products

Vendor	Product	Versions
Alibaba Cloud	qemu-kvm-ma

Timeline

Jan 31, 2020 CVE Published
Jan 31, 2020 CVE Updated

References

ALINUX2-SA-2020:0007: qemu-kvm-ma security and bug fix update (Moderate) advisory
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6501 advisory
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17963 advisory

Open in Interactive Console →