Red Hat Security AdvisoryRHSA-2018:2162
qemu-kvm security update
Released 2018-07-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.1, qemu-img-2:0.12.1.2-2.506.el6_10.1, qemu-kvm-2:0.12.1.2-2.506.el6_10.1 +1
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.1, qemu-img-2:0.12.1.2-2.506.el6_10.1, qemu-kvm-2:0.12.1.2-2.506.el6_10.1 +1
- Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.1, qemu-img-2:0.12.1.2-2.506.el6_10.1, qemu-kvm-2:0.12.1.2-2.506.el6_10.1 +1
- Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.1, qemu-img-2:0.12.1.2-2.506.el6_10.1, qemu-kvm-2:0.12.1.2-2.506.el6_10.1 +1
Fixes 4 records
Priority MEDIUM 59
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an atta…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.60156 · Published 2018-05-22 · Partial fix CWE-203
Priority LOW 28
The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00683 · Published 2018-01-23 · Partial fix CWE-125
Priority LOW 27
QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display u…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00953 · Published 2017-09-01 · Partial fix CWE-125
Priority LOW 26
Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorr…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0061 · Published 2018-03-12 · Partial fix CWE-125
THREATIST.IORead the docs