TI-2017-01866 CVE-2017-2615 · GHSA-wj78-4p23-4g74
Out-of-bounds write in QEMU display
Priority MEDIUM 46
Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue.
RHSA-2017:0309
qemu-kvm security and bug fix update
Released 2017-02-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.491.el6_8.6, qemu-img-2:0.12.1.2-2.491.el6_8.6, qemu-kvm-2:0.12.1.2-2.491.el6_8.6 +1
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.491.el6_8.6, qemu-img-2:0.12.1.2-2.491.el6_8.6, qemu-kvm-2:0.12.1.2-2.491.el6_8.6 +1
- Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.491.el6_8.6, qemu-img-2:0.12.1.2-2.491.el6_8.6, qemu-kvm-2:0.12.1.2-2.491.el6_8.6 +1
- Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.491.el6_8.6, qemu-img-2:0.12.1.2-2.491.el6_8.6, qemu-kvm-2:0.12.1.2-2.491.el6_8.6 +1
Fixes 2 records
TI-2016-02397 CVE-2016-2857 · GHSA-r736-2mvg-hchh
The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users…
Priority LOW 37
The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.