Important: qemu security update (Oracle Linux 7)

Fixed packages 10

Vulnerabilities 9

• High 7.0
  CVE-2018-16867

  A flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in the in usb_mtp_write_d…

  [UNKNOWN] QEMU: qemu Virtualization Debian
  Dec 12, 2018
• Medium 5.0
  CVE-2018-16872

  A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_pa…

  [UNKNOWN] QEMU: qemu qemu Virtualization Debian Ubuntu
  Dec 13, 2018
• Unscored —
  CVE-2018-20123

  pvrdma_realize in hw/rdma/vmw/pvrdma_main.c in QEMU has a Memory leak after an initialisation error.

  qemu Debian
  Dec 17, 2018
• Unscored —
  CVE-2018-20124

  hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element wit…

  qemu Debian
  Dec 20, 2018
• Unscored —
  CVE-2018-20125

  hw/rdma/vmw/pvrdma_cmd.c in QEMU allows attackers to cause a denial of service (NULL pointer dereference or excessive m…

  qemu Debian
  Dec 20, 2018
• Unscored —
  CVE-2018-20126

  hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled.

  qemu Debian
  Dec 20, 2018
• Unscored —
  CVE-2018-20191

  hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which…

  qemu Debian
  Dec 20, 2018
• Unscored —
  CVE-2018-20216

  QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishan…

  qemu Debian
  Dec 20, 2018
• Unscored —
  CVE-2019-6778

  In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.

  qemu qemu slirp4netns Debian Ubuntu
  Mar 17, 2019