Red Hat Security AdvisoryRHSA-2017:1430
qemu-kvm security and bug fix update
Released 2017-06-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-126.el7_3.9, qemu-kvm-10:1.5.3-126.el7_3.9, qemu-kvm-common-10:1.5.3-126.el7_3.9 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-126.el7_3.9, qemu-kvm-10:1.5.3-126.el7_3.9, qemu-kvm-common-10:1.5.3-126.el7_3.9 +1
- Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-126.el7_3.9, qemu-kvm-10:1.5.3-126.el7_3.9, qemu-kvm-common-10:1.5.3-126.el7_3.9 +1
- Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-126.el7_3.9, qemu-kvm-10:1.5.3-126.el7_3.9, qemu-kvm-common-10:1.5.3-126.el7_3.9 +1
Fixes 2 records
Priority LOW 35
Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00625 · Published 2017-07-25 · Partial fix CWE-119
Priority LOW 25
hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cir…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00499 · Published 2017-04-20 · Partial fix CWE-125
