Red Hat Security Advisory

RHSA-2017:0987

qemu-kvm security update

Released 2017-04-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-126.el7_3.6, qemu-kvm-10:1.5.3-126.el7_3.6, qemu-kvm-common-10:1.5.3-126.el7_3.6 +1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-126.el7_3.6, qemu-kvm-10:1.5.3-126.el7_3.6, qemu-kvm-common-10:1.5.3-126.el7_3.6 +1
Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-126.el7_3.6, qemu-kvm-10:1.5.3-126.el7_3.6, qemu-kvm-common-10:1.5.3-126.el7_3.6 +1
Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-126.el7_3.6, qemu-kvm-10:1.5.3-126.el7_3.6, qemu-kvm-common-10:1.5.3-126.el7_3.6 +1

Fixes 1 record

TI-2016-07824 CVE-2016-9603 · GHSA-49mx-v59p-m55m

Heap-based buffer overflow in Qemu:

MEDIUM 50

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is perf…

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04448 Published 2018-07-27 Partial fix CWE-122