Red Hat Security Advisory

RHSA-2019:1650

qemu-kvm security update

Released 2019-07-02 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.4, qemu-img-2:0.12.1.2-2.506.el6_10.4, qemu-kvm-2:0.12.1.2-2.506.el6_10.4 +1
Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.4, qemu-img-2:0.12.1.2-2.506.el6_10.4, qemu-kvm-2:0.12.1.2-2.506.el6_10.4 +1
Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.4, qemu-img-2:0.12.1.2-2.506.el6_10.4, qemu-kvm-2:0.12.1.2-2.506.el6_10.4 +1
Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.4, qemu-img-2:0.12.1.2-2.506.el6_10.4, qemu-kvm-2:0.12.1.2-2.506.el6_10.4 +1

TI-2019-07209 CVE-2019-9824 · GHSA-hx33-mww2-6mf5

LOW 25

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00515 Published 2019-06-03 Partial fix CWE-908