Red Hat Security AdvisoryRHSA-2018:1369
qemu-kvm-rhev security and bug fix update
Released 2018-05-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts qemu-img-rhev-10:2.10.0-21.el7_5.2, qemu-kvm-common-rhev-10:2.10.0-21.el7_5.2, qemu-kvm-rhev-10:2.10.0-21.el7_5.2 +1
Fixes 2 records
Priority LOW 39
The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which trig…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.0061 · Published 2018-03-01 · Partial fix CWE-125
Priority LOW 26
Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorr…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0061 · Published 2018-03-12 · Partial fix CWE-125
