Red Hat Security Advisory

RHSA-2017:0985

qemu-kvm-rhev security, bug fix, and enhancement update

Released 2017-04-18 · Red Hat rating Important · View on Red Hat →

Fixed in

RHEV-H and VDSM for 7 Hosts qemu-img-rhev-10:2.6.0-28.el7_3.9, qemu-kvm-common-rhev-10:2.6.0-28.el7_3.9, qemu-kvm-rhev-10:2.6.0-28.el7_3.9 +1
Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts qemu-img-rhev-10:2.6.0-28.el7_3.9, qemu-kvm-common-rhev-10:2.6.0-28.el7_3.9, qemu-kvm-rhev-10:2.6.0-28.el7_3.9 +1

Fixes 1 record

TI-2016-07824 CVE-2016-9603 · GHSA-49mx-v59p-m55m

Heap-based buffer overflow in Qemu:

MEDIUM 50

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is perf…

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04448 Published 2018-07-27 Partial fix CWE-122