Red Hat Security Advisory

RHSA-2017:3369

qemu-kvm-rhev security and bug fix update

Released 2017-11-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts qemu-img-rhev-10:2.9.0-16.el7_4.11, qemu-kvm-common-rhev-10:2.9.0-16.el7_4.11, qemu-kvm-rhev-10:2.9.0-16.el7_4.11 +1

Fixes 3 records

TI-2017-10320 CVE-2017-14167 · GHSA-g34v-j3w9-h65r

Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick…

LOW 39

Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which tri…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00603 Published 2017-09-08 Fixed CWE-190

TI-2017-11204 CVE-2017-15289 · GHSA-m7v3-764g-pgjx

The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest…

LOW 27

The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculati…

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00463 Published 2017-10-16 Partial fix CWE-787

TI-2017-08372 CVE-2017-11334 · GHSA-4j6c-x59q-c2c4

The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows…

LOW 21

The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qe…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00502 Published 2017-08-02 Partial fix CWE-125