Red Hat Security Advisory

RHSA-2019:2166

qemu-kvm-ma security and bug fix update

Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) qemu-img-ma-10:2.12.0-33.el7, qemu-kvm-common-ma-10:2.12.0-33.el7, qemu-kvm-ma-10:2.12.0-33.el7 +1
Red Hat Enterprise Linux Server Optional (v. 7) qemu-kvm-common-ma-10:2.12.0-33.el7, qemu-kvm-ma-10:2.12.0-33.el7, qemu-kvm-tools-ma-10:2.12.0-33.el7

Fixes 2 records

TI-2018-12788 CVE-2018-17963 · GHSA-8mrp-f43f-c35w

qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX…

MEDIUM 50

qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04653 Published 2018-10-09 Partial fix CWE-190

TI-2019-04557 CVE-2019-6501 · GHSA-rhjv-54vx-5mjg

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

LOW 26

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00556 Published 2019-03-17 Partial fix CWE-125