Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ALAS2-2020-1570

Related Vulnerabilities: CVE-2019-15890   CVE-2020-10756  

A use-after-free issue was found in the SLiRP networking implementation of the QEMU emulator. The issue occurs in ip_reass() routine while reassembling incoming packets, if the first fragment is bigger than the m->m_dat[] buffer. A user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service. (CVE-2019-15890) An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory, resulting in possible information disclosure. (CVE-2020-10756)

Source

ALAS2-2020-1570

Amazon Linux 2 Security Advisory: ALAS-2020-1570
Advisory Release Date: 2020-12-08 21:30 Pacific
Advisory Updated Date: 2020-12-08 22:37 Pacific
Severity: Medium
Issue Overview:

A use-after-free issue was found in the SLiRP networking implementation of the QEMU emulator. The issue occurs in ip_reass() routine while reassembling incoming packets, if the first fragment is bigger than the m->m_dat[] buffer. A user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service. (CVE-2019-15890)

An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory, resulting in possible information disclosure. (CVE-2020-10756)


Affected Packages:

qemu


Issue Correction:
Run yum update qemu to update your system.

New Packages:
aarch64:
    qemu-3.1.0-8.amzn2.0.6.aarch64
    qemu-common-3.1.0-8.amzn2.0.6.aarch64
    qemu-guest-agent-3.1.0-8.amzn2.0.6.aarch64
    qemu-img-3.1.0-8.amzn2.0.6.aarch64
    ivshmem-tools-3.1.0-8.amzn2.0.6.aarch64
    qemu-block-curl-3.1.0-8.amzn2.0.6.aarch64
    qemu-block-dmg-3.1.0-8.amzn2.0.6.aarch64
    qemu-block-iscsi-3.1.0-8.amzn2.0.6.aarch64
    qemu-block-nfs-3.1.0-8.amzn2.0.6.aarch64
    qemu-block-rbd-3.1.0-8.amzn2.0.6.aarch64
    qemu-block-ssh-3.1.0-8.amzn2.0.6.aarch64
    qemu-audio-alsa-3.1.0-8.amzn2.0.6.aarch64
    qemu-audio-oss-3.1.0-8.amzn2.0.6.aarch64
    qemu-audio-pa-3.1.0-8.amzn2.0.6.aarch64
    qemu-audio-sdl-3.1.0-8.amzn2.0.6.aarch64
    qemu-ui-curses-3.1.0-8.amzn2.0.6.aarch64
    qemu-ui-gtk-3.1.0-8.amzn2.0.6.aarch64
    qemu-ui-sdl-3.1.0-8.amzn2.0.6.aarch64
    qemu-kvm-3.1.0-8.amzn2.0.6.aarch64
    qemu-kvm-core-3.1.0-8.amzn2.0.6.aarch64
    qemu-user-3.1.0-8.amzn2.0.6.aarch64
    qemu-user-binfmt-3.1.0-8.amzn2.0.6.aarch64
    qemu-user-static-3.1.0-8.amzn2.0.6.aarch64
    qemu-system-aarch64-3.1.0-8.amzn2.0.6.aarch64
    qemu-system-aarch64-core-3.1.0-8.amzn2.0.6.aarch64
    qemu-system-x86-3.1.0-8.amzn2.0.6.aarch64
    qemu-system-x86-core-3.1.0-8.amzn2.0.6.aarch64
    qemu-debuginfo-3.1.0-8.amzn2.0.6.aarch64

i686:
    qemu-3.1.0-8.amzn2.0.6.i686
    qemu-common-3.1.0-8.amzn2.0.6.i686
    qemu-guest-agent-3.1.0-8.amzn2.0.6.i686
    qemu-img-3.1.0-8.amzn2.0.6.i686
    ivshmem-tools-3.1.0-8.amzn2.0.6.i686
    qemu-block-curl-3.1.0-8.amzn2.0.6.i686
    qemu-block-dmg-3.1.0-8.amzn2.0.6.i686
    qemu-block-iscsi-3.1.0-8.amzn2.0.6.i686
    qemu-block-nfs-3.1.0-8.amzn2.0.6.i686
    qemu-block-ssh-3.1.0-8.amzn2.0.6.i686
    qemu-audio-alsa-3.1.0-8.amzn2.0.6.i686
    qemu-audio-oss-3.1.0-8.amzn2.0.6.i686
    qemu-audio-pa-3.1.0-8.amzn2.0.6.i686
    qemu-audio-sdl-3.1.0-8.amzn2.0.6.i686
    qemu-ui-curses-3.1.0-8.amzn2.0.6.i686
    qemu-ui-gtk-3.1.0-8.amzn2.0.6.i686
    qemu-ui-sdl-3.1.0-8.amzn2.0.6.i686
    qemu-kvm-3.1.0-8.amzn2.0.6.i686
    qemu-kvm-core-3.1.0-8.amzn2.0.6.i686
    qemu-user-3.1.0-8.amzn2.0.6.i686
    qemu-user-binfmt-3.1.0-8.amzn2.0.6.i686
    qemu-user-static-3.1.0-8.amzn2.0.6.i686
    qemu-system-aarch64-3.1.0-8.amzn2.0.6.i686
    qemu-system-aarch64-core-3.1.0-8.amzn2.0.6.i686
    qemu-system-x86-3.1.0-8.amzn2.0.6.i686
    qemu-system-x86-core-3.1.0-8.amzn2.0.6.i686
    qemu-debuginfo-3.1.0-8.amzn2.0.6.i686

src:
    qemu-3.1.0-8.amzn2.0.6.src

x86_64:
    qemu-3.1.0-8.amzn2.0.6.x86_64
    qemu-common-3.1.0-8.amzn2.0.6.x86_64
    qemu-guest-agent-3.1.0-8.amzn2.0.6.x86_64
    qemu-img-3.1.0-8.amzn2.0.6.x86_64
    ivshmem-tools-3.1.0-8.amzn2.0.6.x86_64
    qemu-block-curl-3.1.0-8.amzn2.0.6.x86_64
    qemu-block-dmg-3.1.0-8.amzn2.0.6.x86_64
    qemu-block-iscsi-3.1.0-8.amzn2.0.6.x86_64
    qemu-block-nfs-3.1.0-8.amzn2.0.6.x86_64
    qemu-block-rbd-3.1.0-8.amzn2.0.6.x86_64
    qemu-block-ssh-3.1.0-8.amzn2.0.6.x86_64
    qemu-audio-alsa-3.1.0-8.amzn2.0.6.x86_64
    qemu-audio-oss-3.1.0-8.amzn2.0.6.x86_64
    qemu-audio-pa-3.1.0-8.amzn2.0.6.x86_64
    qemu-audio-sdl-3.1.0-8.amzn2.0.6.x86_64
    qemu-ui-curses-3.1.0-8.amzn2.0.6.x86_64
    qemu-ui-gtk-3.1.0-8.amzn2.0.6.x86_64
    qemu-ui-sdl-3.1.0-8.amzn2.0.6.x86_64
    qemu-kvm-3.1.0-8.amzn2.0.6.x86_64
    qemu-kvm-core-3.1.0-8.amzn2.0.6.x86_64
    qemu-user-3.1.0-8.amzn2.0.6.x86_64
    qemu-user-binfmt-3.1.0-8.amzn2.0.6.x86_64
    qemu-user-static-3.1.0-8.amzn2.0.6.x86_64
    qemu-system-aarch64-3.1.0-8.amzn2.0.6.x86_64
    qemu-system-aarch64-core-3.1.0-8.amzn2.0.6.x86_64
    qemu-system-x86-3.1.0-8.amzn2.0.6.x86_64
    qemu-system-x86-core-3.1.0-8.amzn2.0.6.x86_64
    qemu-debuginfo-3.1.0-8.amzn2.0.6.x86_64

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started