Red Hat Security Advisory

RHSA-2017:3470

qemu-kvm-rhev security and bug fix update

Released 2017-12-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 9.0 qemu-img-rhev-10:2.9.0-16.el7_4.11, qemu-kvm-common-rhev-10:2.9.0-16.el7_4.11, qemu-kvm-rhev-10:2.9.0-16.el7_4.11 +1

Fixes 5 records

TI-2017-05180 CVE-2017-7539 · GHSA-8vvg-hj6f-q4wj

Reachable assertion in Qemu

MEDIUM 41

An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05459 Published 2018-07-26 Fixed CWE-617

TI-2017-07794 CVE-2017-10664 · GHSA-79rh-2xp8-h9rm

qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote…

MEDIUM 40

qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04028 Published 2017-08-02 Partial fix

TI-2017-10320 CVE-2017-14167 · GHSA-g34v-j3w9-h65r

Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick…

LOW 39

Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which tri…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00603 Published 2017-09-08 Fixed CWE-190

TI-2017-11204 CVE-2017-15289 · GHSA-m7v3-764g-pgjx

The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest…

LOW 27

The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculati…

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00463 Published 2017-10-16 Partial fix CWE-787

TI-2017-08372 CVE-2017-11334 · GHSA-4j6c-x59q-c2c4

The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows…

LOW 21

The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qe…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00502 Published 2017-08-02 Partial fix CWE-125