Red Hat Security Advisory

RHSA-2018:2887

qemu-kvm-rhev security update

Released 2018-10-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts qemu-img-rhev-10:2.10.0-21.el7_5.7, qemu-kvm-common-rhev-10:2.10.0-21.el7_5.7, qemu-kvm-rhev-10:2.10.0-21.el7_5.7 +1

TI-2018-08460 CVE-2018-11806 · GHSA-2vg8-mhwg-wq3f

LOW 37

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00807 Published 2018-06-13 Partial fix CWE-787