Red Hat Security Advisory

RHSA-2017:0988

qemu-kvm-rhev security update

Released 2017-04-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 10.0 qemu-img-rhev-10:2.6.0-28.el7_3.9, qemu-kvm-common-rhev-10:2.6.0-28.el7_3.9, qemu-kvm-rhev-10:2.6.0-28.el7_3.9 +1

Fixes 3 records

TI-2016-07824 CVE-2016-9603 · GHSA-49mx-v59p-m55m

Heap-based buffer overflow in Qemu:

MEDIUM 50

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is perf…

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04448 Published 2018-07-27 Partial fix CWE-122

TI-2017-05583 CVE-2017-7980 · GHSA-w847-jx6c-6j35

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8…

LOW 35

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00625 Published 2017-07-25 Partial fix CWE-119

TI-2017-05343 CVE-2017-7718 · GHSA-grqv-x6q8-x92g

hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged…

LOW 25

hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cir…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00499 Published 2017-04-20 Partial fix CWE-125