Red Hat Security Advisory

RHSA-2019:2892

qemu-kvm security update

Released 2019-09-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.5, qemu-img-2:0.12.1.2-2.506.el6_10.5, qemu-kvm-2:0.12.1.2-2.506.el6_10.5 +1
Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.5, qemu-img-2:0.12.1.2-2.506.el6_10.5, qemu-kvm-2:0.12.1.2-2.506.el6_10.5 +1
Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.5, qemu-img-2:0.12.1.2-2.506.el6_10.5, qemu-kvm-2:0.12.1.2-2.506.el6_10.5 +1
Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.5, qemu-img-2:0.12.1.2-2.506.el6_10.5, qemu-kvm-2:0.12.1.2-2.506.el6_10.5 +1

TI-2019-09074 CVE-2019-12155 · GHSA-96vp-7vcr-rp4h

MEDIUM 41

interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05546 Published 2019-05-24 Partial fix CWE-476

TI-2018-12787 CVE-2018-17962 · GHSA-q23x-9vcw-j6c2

MEDIUM 40

Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04503 Published 2018-10-09 Fixed CWE-119

TI-2018-08460 CVE-2018-11806 · GHSA-2vg8-mhwg-wq3f

LOW 37

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00807 Published 2018-06-13 Partial fix CWE-787

TI-2019-04814 CVE-2019-6778 · GHSA-4wxm-q46g-3mcf

LOW 35

In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.0061 Published 2019-03-17 Partial fix CWE-787

TI-2018-07656 CVE-2018-10839 · GHSA-c6cg-p33g-mj6j

LOW 34

Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.03082 Published 2018-10-16 Partial fix CWE-121