Skip to content
OpenAdvisories
Medium ELSA-2018-1416 1 CVE

Moderate: qemu-kvm security update (Oracle Linux 7)

Published May 14, 2018 · Updated May 14, 2018

Ecosystem: Oracle Linux

Summary

[1.5.3-156.el7_5.1]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
(CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 qemu-img 10:1.5.3-156.el7_5.1
Oracle Linux · 7 qemu-kvm 10:1.5.3-156.el7_5.1
Oracle Linux · 7 qemu-kvm-common 10:1.5.3-156.el7_5.1
Oracle Linux · 7 qemu-kvm-tools 10:1.5.3-156.el7_5.1

Vulnerabilities 1

  • Unscored —
    CVE-2018-7858

    Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged …

    qemu qemu Debian Ubuntu