Red Hat Security Advisory

RHSA-2017:1206

qemu-kvm security update

Released 2017-05-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3, qemu-img-2:0.12.1.2-2.503.el6_9.3, qemu-kvm-2:0.12.1.2-2.503.el6_9.3 +1
Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3, qemu-img-2:0.12.1.2-2.503.el6_9.3, qemu-kvm-2:0.12.1.2-2.503.el6_9.3 +1
Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3, qemu-img-2:0.12.1.2-2.503.el6_9.3, qemu-kvm-2:0.12.1.2-2.503.el6_9.3 +1
Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3, qemu-img-2:0.12.1.2-2.503.el6_9.3, qemu-kvm-2:0.12.1.2-2.503.el6_9.3 +1

Fixes 4 records

TI-2016-07824 CVE-2016-9603 · GHSA-49mx-v59p-m55m

Heap-based buffer overflow in Qemu:

MEDIUM 50

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is perf…

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04448 Published 2018-07-27 Partial fix CWE-122

TI-2017-05583 CVE-2017-7980 · GHSA-w847-jx6c-6j35

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8…

LOW 35

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00625 Published 2017-07-25 Partial fix CWE-119

TI-2017-01883 CVE-2017-2633 · GHSA-c46f-47cq-c2fg

Buffer overflow in Qemu:

LOW 34

An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03075 Published 2018-07-27 Partial fix CWE-120

TI-2017-05343 CVE-2017-7718 · GHSA-grqv-x6q8-x92g

hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged…

LOW 25

hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cir…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00499 Published 2017-04-20 Partial fix CWE-125