Red Hat Security AdvisoryRHSA-2017:3368
qemu-kvm security update
Released 2017-11-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-141.el7_4.4, qemu-kvm-10:1.5.3-141.el7_4.4, qemu-kvm-common-10:1.5.3-141.el7_4.4 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-141.el7_4.4, qemu-kvm-10:1.5.3-141.el7_4.4, qemu-kvm-common-10:1.5.3-141.el7_4.4 +1
- Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-141.el7_4.4, qemu-kvm-10:1.5.3-141.el7_4.4, qemu-kvm-common-10:1.5.3-141.el7_4.4 +1
- Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-141.el7_4.4, qemu-kvm-10:1.5.3-141.el7_4.4, qemu-kvm-common-10:1.5.3-141.el7_4.4 +1
Fixes 2 records
Priority LOW 39
Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which tri…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00603 · Published 2017-09-08 · Fixed CWE-190
Priority LOW 27
The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculati…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00463 · Published 2017-10-16 · Partial fix CWE-787
