Red Hat Security Advisory: qemu-kvm-rhev security update

Fixed packages 4

Vulnerabilities 8

• Unscored —
  CVE-2014-0142

  QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zer…

  qemu Debian
  Aug 10, 2017
• Unscored —
  CVE-2014-0143

  Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of …

  qemu Debian
  Aug 10, 2017
• Unscored —
  CVE-2014-0144

  QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential …

  qemu Debian
  Feb 11, 2020
• Unscored —
  CVE-2014-0145

  Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (cr…

  qemu Debian
  Aug 10, 2017
• Unscored —
  CVE-2014-0146

  The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a …

  qemu Debian
  Aug 10, 2017
• Unscored —
  CVE-2014-0147

  Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are v…

  qemu Virtualization Debian
  Feb 11, 2020
• Unscored —
  CVE-2014-0148

  Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when ca…

  qemu Virtualization Debian
  Feb 11, 2020
• Unscored —
  CVE-2014-0150

  Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local gues…

  qemu qemu Debian Ubuntu
  Apr 18, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1078201
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1078212
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1078232
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1078846
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1078848
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1078885
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1079140
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1079240
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0435.json
• report
  https://access.redhat.com/security/cve/CVE-2014-0142
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0142
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0142
• report
  https://access.redhat.com/security/cve/CVE-2014-0143
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0143
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0143
• report
  https://access.redhat.com/security/cve/CVE-2014-0144
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0144
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0144
• report
  https://access.redhat.com/security/cve/CVE-2014-0145
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0145
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0145
• report
  https://access.redhat.com/security/cve/CVE-2014-0146
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0146
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0146
• report
  https://access.redhat.com/security/cve/CVE-2014-0147
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0147
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0147
• report
  https://access.redhat.com/security/cve/CVE-2014-0148
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0148
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0148
• report
  https://access.redhat.com/security/cve/CVE-2014-0150
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0150
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0150