Red Hat Security Advisory

RHSA-2023:2162

qemu-kvm security, bug fix, and enhancement update

Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) qemu-guest-agent-17:7.2.0-14.el9_2, qemu-img-17:7.2.0-14.el9_2, qemu-kvm-17:7.2.0-14.el9_2 +16

Fixes 2 records

TI-2022-02922 CVE-2022-3165 · GHSA-3wph-8799-87r7

Integer underflow in QEMU

LOW 32

An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01564 Published 2022-10-17 Fixed CWE-191

TI-2022-03817 CVE-2022-4172 · GHSA-7m5q-w7p8-x8h4

Buffer overflow in QEMU

LOW 29

An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00401 Published 2022-11-29 Fixed CWE-120