vulnerability
Amazon Linux AMI 2: CVE-2020-29130: Security patch for qemu (ALAS-2021-1671)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Nov 26, 2020 | Jun 24, 2021 | Sep 30, 2022 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Nov 26, 2020
Added
Jun 24, 2021
Modified
Sep 30, 2022
Description
slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.
Solutions
amazon-linux-ami-2-upgrade-ivshmem-toolsamazon-linux-ami-2-upgrade-qemuamazon-linux-ami-2-upgrade-qemu-audio-alsaamazon-linux-ami-2-upgrade-qemu-audio-ossamazon-linux-ami-2-upgrade-qemu-audio-paamazon-linux-ami-2-upgrade-qemu-audio-sdlamazon-linux-ami-2-upgrade-qemu-block-curlamazon-linux-ami-2-upgrade-qemu-block-dmgamazon-linux-ami-2-upgrade-qemu-block-iscsiamazon-linux-ami-2-upgrade-qemu-block-nfsamazon-linux-ami-2-upgrade-qemu-block-rbdamazon-linux-ami-2-upgrade-qemu-block-sshamazon-linux-ami-2-upgrade-qemu-commonamazon-linux-ami-2-upgrade-qemu-debuginfoamazon-linux-ami-2-upgrade-qemu-guest-agentamazon-linux-ami-2-upgrade-qemu-imgamazon-linux-ami-2-upgrade-qemu-kvmamazon-linux-ami-2-upgrade-qemu-kvm-coreamazon-linux-ami-2-upgrade-qemu-system-aarch64amazon-linux-ami-2-upgrade-qemu-system-aarch64-coreamazon-linux-ami-2-upgrade-qemu-system-x86amazon-linux-ami-2-upgrade-qemu-system-x86-coreamazon-linux-ami-2-upgrade-qemu-ui-cursesamazon-linux-ami-2-upgrade-qemu-ui-gtkamazon-linux-ami-2-upgrade-qemu-ui-sdlamazon-linux-ami-2-upgrade-qemu-useramazon-linux-ami-2-upgrade-qemu-user-binfmtamazon-linux-ami-2-upgrade-qemu-user-static
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.