Red Hat Security Advisory

RHSA-2019:1723

qemu-kvm-rhev security update

Released 2019-07-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 10.0 qemu-img-rhev-10:2.12.0-18.el7_6.6, qemu-kvm-common-rhev-10:2.12.0-18.el7_6.6, qemu-kvm-rhev-10:2.12.0-18.el7_6.6 +1

TI-2018-14786 CVE-2018-20815 · GHSA-4g35-fx39-gwjh

MEDIUM 49

In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04428 Published 2019-05-31 Partial fix CWE-119