Red Hat Security AdvisoryRHSA-2018:2462
qemu-kvm security and bug fix update
Released 2018-08-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-156.el7_5.5, qemu-kvm-10:1.5.3-156.el7_5.5, qemu-kvm-common-10:1.5.3-156.el7_5.5 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-156.el7_5.5, qemu-kvm-10:1.5.3-156.el7_5.5, qemu-kvm-common-10:1.5.3-156.el7_5.5 +1
- Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-156.el7_5.5, qemu-kvm-10:1.5.3-156.el7_5.5, qemu-kvm-common-10:1.5.3-156.el7_5.5 +1
- Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-156.el7_5.5, qemu-kvm-10:1.5.3-156.el7_5.5, qemu-kvm-common-10:1.5.3-156.el7_5.5 +1
Fixes 2 records
Priority LOW 39
The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which trig…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.0061 · Published 2018-03-01 · Partial fix CWE-125
Priority LOW 37
m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00807 · Published 2018-06-13 · Partial fix CWE-787
