CVE-2020-35517: qemu Improper Privilege Management

Modified

AliasesRHSA-2021:0711RHSA-2021:0743DEBIAN-CVE-2020-35517+1 more

Published 28-01-2021Last modified 04-08-2024

Vulnerability summary

CVE-2020-35517 is a high (CVSS 8.2) Improper Privilege Management vulnerability in qemu. EPSS estimates a 0.53% chance of exploitation in the next 30 days, higher than 45% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritisepublic exploit

Public exploit (reference, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

8.2/10

010

High · v3.1 (NVD)

EPSS score

0.53%

0%100%

Low · +0.01 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference

Advisory lineage

Upstream 0 · Downstream 1

RHBA-2021:0639

Timeline

28-01-2021
PublishedVulnerability first disclosed.
04-08-2024
Last modifiedVulnerability information updated.

Description

A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.18.2v2.04.6

EPSS trend

Probability

0.53%

Chance of exploitation in the next 30 days

Percentile

45%

Versus all other CVEs

30-day change

Increase +0.01 pp

From 0.53% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown
referenceUnverified
Exploit Reference (lists.gnu.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected systems

Version check

Known conditions: local access, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat197 products

hivex< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
hivex-debuginfo< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
hivex-debugsource< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
hivex-devel< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
libguestfs< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890

libguestfs-bash-completion< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-benchmarking< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-benchmarking-debuginfo< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-debuginfo< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-debugsource< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-devel< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-gfs2< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-gobject< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-gobject-debuginfo< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-gobject-devel< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-inspect-icons< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-java< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-java-debuginfo< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-java-devel< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-javadoc< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-man-pages-ja< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-man-pages-uk< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-rescue< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-rsync< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-tools< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-tools-c< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-tools-c-debuginfo< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libguestfs-winsupport< 0:8.2-1.module+el8.3.0+6423+e4cb6418 | < 0:8.2-1.module+el8.2.0+5590+82cd80df
libguestfs-xfs< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
libiscsi< 0:1.18.0-8.module+el8.1.0+4066+0f1aadab | < 0:1.18.0-8.module+el8.2.0+4793+b09dd2fb
libiscsi-debuginfo< 0:1.18.0-8.module+el8.1.0+4066+0f1aadab | < 0:1.18.0-8.module+el8.2.0+4793+b09dd2fb
libiscsi-debugsource< 0:1.18.0-8.module+el8.1.0+4066+0f1aadab | < 0:1.18.0-8.module+el8.2.0+4793+b09dd2fb
libiscsi-devel< 0:1.18.0-8.module+el8.1.0+4066+0f1aadab | < 0:1.18.0-8.module+el8.2.0+4793+b09dd2fb
libiscsi-utils< 0:1.18.0-8.module+el8.1.0+4066+0f1aadab | < 0:1.18.0-8.module+el8.2.0+4793+b09dd2fb
libiscsi-utils-debuginfo< 0:1.18.0-8.module+el8.1.0+4066+0f1aadab | < 0:1.18.0-8.module+el8.2.0+4793+b09dd2fb
libnbd< 0:1.2.2-1.module+el8.3.0+7353+9de0a3cc | < 0:1.2.2-1.module+el8.2.0+5644+32ac38d4
libnbd-debuginfo< 0:1.2.2-1.module+el8.3.0+7353+9de0a3cc | < 0:1.2.2-1.module+el8.2.0+5644+32ac38d4
libnbd-debugsource< 0:1.2.2-1.module+el8.3.0+7353+9de0a3cc | < 0:1.2.2-1.module+el8.2.0+5644+32ac38d4
libnbd-devel< 0:1.2.2-1.module+el8.3.0+7353+9de0a3cc | < 0:1.2.2-1.module+el8.2.0+5644+32ac38d4
libtpms< 0:0.7.0-1.20191018gitdc116933b7.module+el8.2.0+4793+b09dd2fb
libtpms-debuginfo< 0:0.7.0-1.20191018gitdc116933b7.module+el8.2.0+4793+b09dd2fb
libtpms-debugsource< 0:0.7.0-1.20191018gitdc116933b7.module+el8.2.0+4793+b09dd2fb
libtpms-devel< 0:0.7.0-1.20191018gitdc116933b7.module+el8.2.0+4793+b09dd2fb
libvirt< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-admin< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-admin-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-bash-completion< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-client< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-client-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-config-network< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-config-nwfilter< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-interface< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-interface-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-network< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-network-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-nodedev< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-nodedev-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-nwfilter< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-nwfilter-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-qemu< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-qemu-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-secret< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-secret-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-core< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-core-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-disk< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-disk-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-gluster< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-gluster-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-iscsi< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-iscsi-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-iscsi-direct< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-iscsi-direct-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-logical< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-logical-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-mpath< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-mpath-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-rbd< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-rbd-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-scsi< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-driver-storage-scsi-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-daemon-kvm< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-dbus< 0:1.3.0-2.module+el8.3.0+6423+e4cb6418 | < 0:1.3.0-2.module+el8.2.0+4793+b09dd2fb
libvirt-dbus-debuginfo< 0:1.3.0-2.module+el8.3.0+6423+e4cb6418 | < 0:1.3.0-2.module+el8.2.0+4793+b09dd2fb
libvirt-dbus-debugsource< 0:1.3.0-2.module+el8.3.0+6423+e4cb6418 | < 0:1.3.0-2.module+el8.2.0+4793+b09dd2fb
libvirt-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-debugsource< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-devel< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-docs< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-libs< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-libs-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-lock-sanlock< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-lock-sanlock-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-nss< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-nss-debuginfo< 0:6.0.0-28.module+el8.3.0+7827+5e65edd7 | < 0:6.0.0-25.5.module+el8.2.1+8680+ea98947b
libvirt-python< 0:6.0.0-1.module+el8.3.0+6423+e4cb6418 | < 0:6.0.0-1.module+el8.2.0+5453+31b2b136
libvirt-python-debugsource< 0:6.0.0-1.module+el8.3.0+6423+e4cb6418 | < 0:6.0.0-1.module+el8.2.0+5453+31b2b136
lua-guestfs< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
lua-guestfs-debuginfo< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
nbdfuse< 0:1.2.2-1.module+el8.3.0+7353+9de0a3cc | < 0:1.2.2-1.module+el8.2.0+5644+32ac38d4
nbdfuse-debuginfo< 0:1.2.2-1.module+el8.3.0+7353+9de0a3cc | < 0:1.2.2-1.module+el8.2.0+5644+32ac38d4
nbdkit< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-bash-completion< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-basic-filters< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-basic-filters-debuginfo< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-basic-plugins< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-basic-plugins-debuginfo< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-curl-plugin< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-curl-plugin-debuginfo< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-debuginfo< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-debugsource< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-devel< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-example-plugins< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-example-plugins-debuginfo< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-gzip-plugin< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-gzip-plugin-debuginfo< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-linuxdisk-plugin< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-linuxdisk-plugin-debuginfo< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-python-plugin< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-python-plugin-debuginfo< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-server< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-server-debuginfo< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-ssh-plugin< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-ssh-plugin-debuginfo< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-vddk-plugin< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-vddk-plugin-debuginfo< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-xz-filter< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
nbdkit-xz-filter-debuginfo< 0:1.16.2-4.module+el8.3.0+6922+fd575af8 | < 0:1.16.2-4.module+el8.2.1+6710+effcb1df
netcf< 0:0.2.8-12.module+el8.1.0+4066+0f1aadab | < 0:0.2.8-12.module+el8.2.0+4793+b09dd2fb
netcf-debuginfo< 0:0.2.8-12.module+el8.1.0+4066+0f1aadab | < 0:0.2.8-12.module+el8.2.0+4793+b09dd2fb
netcf-debugsource< 0:0.2.8-12.module+el8.1.0+4066+0f1aadab | < 0:0.2.8-12.module+el8.2.0+4793+b09dd2fb
netcf-devel< 0:0.2.8-12.module+el8.1.0+4066+0f1aadab | < 0:0.2.8-12.module+el8.2.0+4793+b09dd2fb
netcf-libs< 0:0.2.8-12.module+el8.1.0+4066+0f1aadab | < 0:0.2.8-12.module+el8.2.0+4793+b09dd2fb
netcf-libs-debuginfo< 0:0.2.8-12.module+el8.1.0+4066+0f1aadab | < 0:0.2.8-12.module+el8.2.0+4793+b09dd2fb
ocaml-hivex< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
ocaml-hivex-debuginfo< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
ocaml-hivex-devel< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
ocaml-libguestfs< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
ocaml-libguestfs-debuginfo< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
ocaml-libguestfs-devel< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
ocaml-libnbd< 0:1.2.2-1.module+el8.3.0+7353+9de0a3cc | < 0:1.2.2-1.module+el8.2.0+5644+32ac38d4
ocaml-libnbd-debuginfo< 0:1.2.2-1.module+el8.3.0+7353+9de0a3cc | < 0:1.2.2-1.module+el8.2.0+5644+32ac38d4
ocaml-libnbd-devel< 0:1.2.2-1.module+el8.3.0+7353+9de0a3cc | < 0:1.2.2-1.module+el8.2.0+5644+32ac38d4
perl-hivex< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
perl-hivex-debuginfo< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
perl-Sys-Guestfs< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
perl-Sys-Guestfs-debuginfo< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
perl-Sys-Virt< 0:6.0.0-1.module+el8.3.0+6423+e4cb6418 | < 0:6.0.0-1.module+el8.2.0+5488+267def79
perl-Sys-Virt-debuginfo< 0:6.0.0-1.module+el8.3.0+6423+e4cb6418 | < 0:6.0.0-1.module+el8.2.0+5488+267def79
perl-Sys-Virt-debugsource< 0:6.0.0-1.module+el8.3.0+6423+e4cb6418 | < 0:6.0.0-1.module+el8.2.0+5488+267def79
python-pyvmomi< 0:6.7.1-7.module+el8.2.0+4793+b09dd2fb
python3-hivex< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
python3-hivex-debuginfo< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
python3-libguestfs< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
python3-libguestfs-debuginfo< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
python3-libnbd< 0:1.2.2-1.module+el8.3.0+7353+9de0a3cc | < 0:1.2.2-1.module+el8.2.0+5644+32ac38d4
python3-libnbd-debuginfo< 0:1.2.2-1.module+el8.3.0+7353+9de0a3cc | < 0:1.2.2-1.module+el8.2.0+5644+32ac38d4
python3-libvirt< 0:6.0.0-1.module+el8.3.0+6423+e4cb6418 | < 0:6.0.0-1.module+el8.2.0+5453+31b2b136
python3-libvirt-debuginfo< 0:6.0.0-1.module+el8.3.0+6423+e4cb6418 | < 0:6.0.0-1.module+el8.2.0+5453+31b2b136
python3-pyvmomi< 0:6.7.1-7.module+el8.2.0+4793+b09dd2fb
qemu-guest-agent< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-guest-agent-debuginfo< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-img< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-img-debuginfo< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-block-curl< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-block-curl-debuginfo< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-block-gluster< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-block-gluster-debuginfo< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-block-iscsi< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-block-iscsi-debuginfo< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-block-rbd< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-block-rbd-debuginfo< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-block-ssh< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-block-ssh-debuginfo< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-common< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-common-debuginfo< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-core< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-core-debuginfo< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-debuginfo< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-debugsource< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-tests< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
qemu-kvm-tests-debuginfo< 15:4.2.0-34.module+el8.3.0+9903+ca3e42fb.4 | < 15:4.2.0-29.module+el8.2.1+9917+2543143c.7
ruby-hivex< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
ruby-hivex-debuginfo< 0:1.3.18-20.module+el8.3.0+6423+e4cb6418 | < 0:1.3.18-20.module+el8.2.0+5588+63a201c3
ruby-libguestfs< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
ruby-libguestfs-debuginfo< 1:1.40.2-25.module+el8.3.0+7421+642fe24f | < 1:1.40.2-24.module+el8.2.1+7154+47ffd890
seabios< 0:1.13.0-2.module+el8.3.0+7353+9de0a3cc | < 0:1.13.0-2.module+el8.2.1+7284+aa32a2c4
seabios-bin< 0:1.13.0-2.module+el8.3.0+7353+9de0a3cc | < 0:1.13.0-2.module+el8.2.1+7284+aa32a2c4
seavgabios-bin< 0:1.13.0-2.module+el8.3.0+7353+9de0a3cc | < 0:1.13.0-2.module+el8.2.1+7284+aa32a2c4
sgabios< 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab | < 1:0.20170427git-3.module+el8.2.0+4793+b09dd2fb
sgabios-bin< 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab | < 1:0.20170427git-3.module+el8.2.0+4793+b09dd2fb
SLOF< 0:20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418 | < 0:20191022-3.git899d9883.module+el8.2.0+5449+efc036dd
supermin< 0:5.1.19-10.module+el8.3.0+6423+e4cb6418 | < 0:5.1.19-10.module+el8.2.0+4793+b09dd2fb

Show all 197

Alpine1 product

qemu≥ 5.0.0, < 5.2.0-r0

Debian1 product

qemu< 1:5.2+dfsg-5

Qemu1 product

qemu≥ 5.0.0, ≤ 5.2.50

4 vendors · 200 products · Showing 200 of 218

References

17 links

github.com/qemu/qemu/commit/ebf101955ce8f8d72fba103b5151115a4335de2cX Refsource MISCPatchThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=1915823X Refsource MISCREPORTIssue TrackingPatchThird Party Advisory
www.openwall.com/lists/oss-security/2021/01/22/1X Refsource MISCARTICLEExploitMailing ListPatchThird Party Advisory
lists.gnu.org/archive/html/qemu-devel/2021-01/msg05461.htmlX Refsource MISCExploitMailing ListPatchThird Party Advisory
security.netapp.com/advisory/ntap-20210312-0002/X Refsource CONFIRMThird Party Advisory
security.gentoo.org/glsa/202208-27Vendor AdvisoryX Refsource GENTOOThird Party Advisory
access.redhat.com/errata/RHSA-2021:0711Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0711.jsonAdvisory
access.redhat.com/security/cve/CVE-2020-35517REPORT

Show all 17 references

www.cve.org/CVERecord?id=CVE-2020-35517Advisory
nvd.nist.gov/vuln/detail/CVE-2020-35517Advisory
virtio-fs.gitlab.ioARTICLE
access.redhat.com/errata/RHSA-2021:0743Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0743.jsonAdvisory
security-tracker.debian.org/tracker/CVE-2020-35517Advisory
security.alpinelinux.org/vuln/CVE-2020-35517Advisory