Red Hat Security Advisory

RHSA-2016:2706

qemu-kvm-rhev security, bug fix, and enhancement update

Released 2016-11-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 qemu-img-rhev-10:2.6.0-27.el7, qemu-kvm-common-rhev-10:2.6.0-27.el7, qemu-kvm-rhev-10:2.6.0-27.el7 +1

Fixes 3 records

TI-2016-02397 CVE-2016-2857 · GHSA-r736-2mvg-hchh

The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users…

LOW 37

The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00564 Published 2016-04-08 Partial fix CWE-119

TI-2015-07260 CVE-2015-8818 · GHSA-v5jw-2c5m-f8hv

The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick…

LOW 25

The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via uns…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00407 Published 2016-12-29 Partial fix

TI-2015-07259 CVE-2015-8817 · GHSA-v4mw-844w-rfcf

QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a…

LOW 25

QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00417 Published 2016-12-29 Partial fix CWE-125