Red Hat Security Advisory

RHSA-2018:1646

qemu-kvm-rhev security update

Released 2018-05-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 8.0 (Liberty) qemu-img-rhev-10:2.10.0-21.el7_5.3, qemu-kvm-common-rhev-10:2.10.0-21.el7_5.3, qemu-kvm-rhev-10:2.10.0-21.el7_5.3 +1

Fixes 3 records

TI-2018-02664 CVE-2018-3639

Observable discrepancy in Intel Multiple

MEDIUM 59

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an atta…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.60156 Published 2018-05-22 Partial fix CWE-203

TI-2018-05458 CVE-2018-7550 · GHSA-6q85-h749-54pf

The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows…

LOW 39

The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which trig…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0061 Published 2018-03-01 Partial fix CWE-125

TI-2018-05696 CVE-2018-7858 · GHSA-f62g-jrwm-hq59

Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support…

LOW 26

Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorr…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0061 Published 2018-03-12 Partial fix CWE-125