Red Hat Security Advisory

RHSA-2018:3062

qemu-kvm-ma security, bug fix, and enhancement update

Released 2018-10-30 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) qemu-img-ma-10:2.12.0-18.el7, qemu-kvm-common-ma-10:2.12.0-18.el7, qemu-kvm-ma-10:2.12.0-18.el7 +1
Red Hat Enterprise Linux Server Optional (v. 7) qemu-kvm-common-ma-10:2.12.0-18.el7, qemu-kvm-ma-10:2.12.0-18.el7, qemu-kvm-tools-ma-10:2.12.0-18.el7
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) qemu-img-ma-10:2.12.0-18.el7, qemu-kvm-common-ma-10:2.12.0-18.el7, qemu-kvm-ma-10:2.12.0-18.el7 +1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) qemu-img-ma-10:2.12.0-18.el7, qemu-kvm-common-ma-10:2.12.0-18.el7, qemu-kvm-ma-10:2.12.0-18.el7 +1

Fixes 1 record

TI-2017-11094 CVE-2017-15124 · GHSA-7hxc-fq33-47vp

Resource allocation without limits in Qemu

LOW 38

VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02843 Published 2018-01-09 Partial fix CWE-770