CVE-2021-20295

CVE Details

Release Date:2022-04-01
Impact:None What is this?

Description


It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for the qemu-kvm component issue CVE-2020-10756, which was previously corrected in virt:rhel/qemu-kvm via erratum RHSA-2020:4059 (https://access.redhat.com/errata/RHSA-2020:4059). CVE-2021-20295 was assigned to that Red Hat specific security regression. For more details about the original security issue CVE-2020-10756, refer to bug 1835986 or the CVE page: https://access.redhat.com/security/cve/CVE-2020-10756.

See more information about CVE-2021-20295 from MITRE CVE dictionary and NIST NVD


NOTE: The following CVSS metrics and score provided are preliminary and subject to review.


CVSS v3 metrics

Base Score: 6.5
Vector String: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Version: 3.0
Attack Vector: Local
Attack Complexity: Low
Privileges Required: Low
User Interaction: None
Scope: Changed
Confidentiality Impact: High
Integrity Impact: None
Availability Impact: None

Errata information


PlatformErrataRelease Date
Oracle Linux version 8 (hivex)ELSA-2021-10642021-04-09
Oracle Linux version 8 (libguestfs)ELSA-2021-10642021-04-09
Oracle Linux version 8 (libguestfs-winsupport)ELSA-2021-10642021-04-09
Oracle Linux version 8 (libiscsi)ELSA-2021-10642021-04-09
Oracle Linux version 8 (libnbd)ELSA-2021-10642021-04-09
Oracle Linux version 8 (libvirt)ELSA-2021-10642021-04-09
Oracle Linux version 8 (libvirt-dbus)ELSA-2021-10642021-04-09
Oracle Linux version 8 (libvirt-python)ELSA-2021-10642021-04-09
Oracle Linux version 8 (nbdkit)ELSA-2021-10642021-04-09
Oracle Linux version 8 (netcf)ELSA-2021-10642021-04-09
Oracle Linux version 8 (perl-Sys-Virt)ELSA-2021-10642021-04-09
Oracle Linux version 8 (qemu-kvm)ELSA-2021-10642021-04-09
Oracle Linux version 8 (seabios)ELSA-2021-10642021-04-09
Oracle Linux version 8 (sgabios)ELSA-2021-10642021-04-09
Oracle Linux version 8 (supermin)ELSA-2021-10642021-04-09


This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections:

software.hardware.complete