Red Hat Security Advisory

RHSA-2018:2762

qemu-kvm-ma security update

Released 2018-09-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) qemu-img-ma-10:2.10.0-21.el7_5.4, qemu-kvm-common-ma-10:2.10.0-21.el7_5.4, qemu-kvm-ma-10:2.10.0-21.el7_5.4 +1
Red Hat Enterprise Linux Server Optional (v. 7) qemu-kvm-common-ma-10:2.10.0-21.el7_5.4, qemu-kvm-ma-10:2.10.0-21.el7_5.4, qemu-kvm-tools-ma-10:2.10.0-21.el7_5.4
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) qemu-img-ma-10:2.10.0-21.el7_5.4, qemu-kvm-common-ma-10:2.10.0-21.el7_5.4, qemu-kvm-ma-10:2.10.0-21.el7_5.4 +1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) qemu-img-ma-10:2.10.0-21.el7_5.4, qemu-kvm-common-ma-10:2.10.0-21.el7_5.4, qemu-kvm-ma-10:2.10.0-21.el7_5.4 +1

TI-2018-08460 CVE-2018-11806 · GHSA-2vg8-mhwg-wq3f

LOW 37

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00807 Published 2018-06-13 Partial fix CWE-787