Known vulnerabilities in qemu-kvm-ma (Red Hat package)

Vendor: Red Hat Inc.
Software: qemu-kvm-ma (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:qemu-kvm-ma_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 9
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting qemu-kvm-ma (Red Hat package) qemu-kvm-ma (Red Hat package) is affected by 9 known vulnerabilities: 6 medium, 3 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU45985 - Out-of-bounds write
CVE-2020-14364		 CWE-787 Medium
Available
No
 2.12.0-18.el7_6.7, 2.12.0-33.el7_7.4 24.08.2020 SB2020082410
SB2020090715
SB2020091121
and 35 more
#VU44163 - Reachable Assertion
CVE-2020-16092		 CWE-617 Medium
No
No
 2.12.0-48.el7_9.2 11.08.2020 SB2020081102
SB2020090715
SB2020101311
and 9 more
#VU27389 - Use After Free
CVE-2020-1983		 CWE-416 Medium
Available
No
 2.12.0-48.el7_9.2 28.04.2020 SB2020042818
SB2020043016
SB2020050725
and 16 more
#VU27388 - Missing release of memory after effective lifetime
CVE-2019-20382		 CWE-401 Medium
No
No
 2.12.0-48.el7 28.04.2020 SB2019090618
SB2020040749
SB2020043016
and 8 more
#VU25510 - Heap-based Buffer Overflow
CVE-2020-1711		 CWE-122 Medium
No
No
 2.10.0-21.el7_5.5, 2.12.0-33.el7_7.3, 2.12.0-44.el7 21.02.2020 SB2020022116
SB2020030419
SB2020030612
and 14 more
#VU25458 - Heap-based Buffer Overflow
CVE-2020-7039		 CWE-122 Low
No
No
 2.12.0-33.el7_7.3, 2.12.0-44.el7 19.02.2020 SB2020021912
SB2020031117
SB2020031053
and 25 more
#VU25456 - Memory corruption
CVE-2020-8608		 CWE-119 Low
No
No
 2.12.0-33.el7_7.3, 2.12.0-44.el7_8.1 19.02.2020 SB2020021912
SB2020033013
SB2020040146
and 24 more
#VU20446 - Heap-based Buffer Overflow
CVE-2019-14378		 CWE-122 Medium
No
No
 2.12.0-18.el7_6.6 28.08.2019 SB2019082401
SB2019090204
SB2019090303
and 22 more
#VU16553 - Improper input validation
CVE-2018-15746		 CWE-20 Low
No
No
 2.12.0-48.el7 16.12.2018 SB2018121712
SB2018120730
SB2019080903
and 4 more