Red Hat OpenStack update for qemu-kvm-rhev
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2019-20382 CVE-2020-14364 |
| CWE-ID | CWE-401 CWE-787 |
| Exploitation vector | Network |
| Public exploit | Public exploit code for vulnerability #2 is available. |
| Vulnerable software |
Red Hat OpenStack for IBM Power Server applications / Other server solutions Red Hat OpenStack Server applications / Other server solutions qemu-kvm-rhev (Red Hat package) Operating systems & Components / Operating system package or component |
| Vendor | Red Hat Inc. |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Memory leak
EUVDB-ID: #VU27388
Risk: Medium
CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2019-20382
CWE-ID:
CWE-401 - Missing release of memory after effective lifetime
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to memory leak within the zrle_compress_data() function in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd. A remote attacker can perform a denial of service attack.
Install updates from vendor's website.
Red Hat OpenStack for IBM Power: 13.0
Red Hat OpenStack: 13.0
qemu-kvm-rhev (Red Hat package): before 2.12.0-48.el7_9.1
CPE2.3- cpe:2.3:a:red_hat:red_hat_openstack_for_ibm_power:13.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:red_hat_openstack:13.0:*:*:*:*:*:*:*
- cpe:2.3:o:red_hat:qemu-kvm-rhev_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
https://access.redhat.com/errata/RHSA-2020:4167
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Out-of-bounds write
EUVDB-ID: #VU45985
Risk: Medium
CVSSv4.0: 7.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Green]
CVE-ID: CVE-2020-14364
CWE-ID:
CWE-787 - Out-of-bounds write
Exploit availability: Yes
DescriptionThe vulnerability allows a remote user to compromise vulnerable system.
The vulnerability exists due to a boundary error within the USB emulator in QEMU. A remote user with access to guest operating system on the guest operating system can send specially crafted USB packets, trigger out-of-bounds write and execute arbitrary code on the host system.
MitigationInstall updates from vendor's website.
Red Hat OpenStack for IBM Power: 13.0
Red Hat OpenStack: 13.0
qemu-kvm-rhev (Red Hat package): before 2.12.0-48.el7_9.1
CPE2.3- cpe:2.3:a:red_hat:red_hat_openstack_for_ibm_power:13.0:*:*:*:*:*:*:*
- cpe:2.3:a:red_hat:red_hat_openstack:13.0:*:*:*:*:*:*:*
- cpe:2.3:o:red_hat:qemu-kvm-rhev_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
https://access.redhat.com/errata/RHSA-2020:4167
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
