Read the docs
Red Hat Security Advisory

RHSA-2024:2135

qemu-kvm security update

Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 5 records

TI-2023-22631 CVE-2023-42467 · GHSA-q76v-8f8c-4c2j

QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in…

Priority MEDIUM 58

QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00415 Published 2023-09-11 Partial fix CWE-369
TI-2023-04682 CVE-2023-5088 · GHSA-9627-hqj3-f64h

Qemu: improper ide controller reset can lead to mbr overwrite

Priority LOW 32

A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code).

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00257 Published 2023-11-03 Partial fix · 8100020240314161907.e155f54d, 17:8.2.0-11.el9_4 CWE-821
TI-2023-06113 CVE-2023-6683 · GHSA-x9c6-9g9w-hg73

Qemu: vnc: null pointer dereference in qemu_clipboard_request()

Priority LOW 31

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01261 Published 2024-01-12 Fixed in 8100020240314161907.e155f54d, 17:8.2.0-11.el9_4 CWE-476
TI-2023-02827 CVE-2023-3019 · GHSA-786x-44fx-qqh8

Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()

Priority LOW 29

A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00318 Published 2023-07-24 Partial fix · 8090020231206155326.a75119d5, 8060020231128234847.ad008a3a +2 CWE-416