Red Hat Security AdvisoryRHSA-2017:0396
qemu-kvm security and bug fix update
Released 2017-03-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-126.el7_3.5, qemu-kvm-10:1.5.3-126.el7_3.5, qemu-kvm-common-10:1.5.3-126.el7_3.5 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-126.el7_3.5, qemu-kvm-10:1.5.3-126.el7_3.5, qemu-kvm-common-10:1.5.3-126.el7_3.5 +1
- Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-126.el7_3.5, qemu-kvm-10:1.5.3-126.el7_3.5, qemu-kvm-common-10:1.5.3-126.el7_3.5 +1
- Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-126.el7_3.5, qemu-kvm-10:1.5.3-126.el7_3.5, qemu-kvm-common-10:1.5.3-126.el7_3.5 +1
Fixes 2 records
Priority MEDIUM 49
Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue.
CVSS 3.0CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.03559 · Published 2018-07-27 · Partial fix CWE-787
Priority MEDIUM 46
Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue.
CVSS 3.0CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.03648 · Published 2018-07-02 · Partial fix CWE-787