Red Hat Security Advisory

RHSA-2018:2822

qemu-kvm-rhev security update

Released 2018-09-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 10.0 qemu-img-rhev-10:2.10.0-21.el7_5.6, qemu-kvm-common-rhev-10:2.10.0-21.el7_5.6, qemu-kvm-rhev-10:2.10.0-21.el7_5.6 +1
Red Hat OpenStack Platform 12.0 qemu-img-rhev-10:2.10.0-21.el7_5.6, qemu-kvm-common-rhev-10:2.10.0-21.el7_5.6, qemu-kvm-rhev-10:2.10.0-21.el7_5.6 +1
Red Hat OpenStack Platform 13.0 qemu-img-rhev-10:2.10.0-21.el7_5.6, qemu-kvm-common-rhev-10:2.10.0-21.el7_5.6, qemu-kvm-rhev-10:2.10.0-21.el7_5.6 +1
Red Hat OpenStack Platform 8.0 (Liberty) qemu-img-rhev-10:2.10.0-21.el7_5.6, qemu-kvm-common-rhev-10:2.10.0-21.el7_5.6, qemu-kvm-rhev-10:2.10.0-21.el7_5.6 +1
Red Hat OpenStack Platform 9.0 qemu-img-rhev-10:2.10.0-21.el7_5.6, qemu-kvm-common-rhev-10:2.10.0-21.el7_5.6, qemu-kvm-rhev-10:2.10.0-21.el7_5.6 +1

TI-2018-08460 CVE-2018-11806 · GHSA-2vg8-mhwg-wq3f

LOW 37

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00807 Published 2018-06-13 Partial fix CWE-787