TI-2017-01883 CVE-2017-2633 · GHSA-c46f-47cq-c2fg
Buffer overflow in Qemu:
Priority LOW 34
An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver.
RHSA-2017:1856
qemu-kvm security, bug fix, and enhancement update
Released 2017-08-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-141.el7, qemu-kvm-10:1.5.3-141.el7, qemu-kvm-common-10:1.5.3-141.el7 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-141.el7, qemu-kvm-10:1.5.3-141.el7, qemu-kvm-common-10:1.5.3-141.el7 +1
- Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-141.el7, qemu-kvm-10:1.5.3-141.el7, qemu-kvm-common-10:1.5.3-141.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-141.el7, qemu-kvm-10:1.5.3-141.el7, qemu-kvm-common-10:1.5.3-141.el7 +1
Fixes 3 records
TI-2016-03418 CVE-2016-4020 · GHSA-vcqr-cc8h-57gj
The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the…
Priority LOW 29
The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task…
TI-2017-03826 CVE-2017-5898 · GHSA-vfvm-h748-r758
Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c…
Priority LOW 25
Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (ap…