Red Hat Security Advisory

RHSA-2019:4344

qemu-kvm-rhev security update

Released 2019-12-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 10.0 qemu-img-rhev-10:2.12.0-33.el7_7.4, qemu-kvm-common-rhev-10:2.12.0-33.el7_7.4, qemu-kvm-rhev-10:2.12.0-33.el7_7.4 +1

Fixes 2 records

TI-2019-10717 CVE-2019-14378 · GHSA-qvqc-h5c8-h785

ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large…

MEDIUM 55

ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.16658 Published 2019-07-29 Partial fix CWE-755

TI-2019-09074 CVE-2019-12155 · GHSA-96vp-7vcr-rp4h

interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.

MEDIUM 41

interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05546 Published 2019-05-24 Partial fix CWE-476