Red Hat Security Advisory: rhev-hypervisor6 3.4.0 security, bug fix, and enhancement update

Fixed packages 1

Vulnerabilities 18

• Unscored —
  CVE-2013-4148

  Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote …

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4151

  The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code …

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4535

  The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary f…

  qemu qemu Virtualization Debian Ubuntu
  Feb 11, 2020
• Unscored —
  CVE-2013-4536

  An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to …

  qemu qemu Virtualization Debian Ubuntu
  May 28, 2021
• Unscored —
  CVE-2013-4541

  The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrar…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-4542

  The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execut…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2013-6399

  Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to exe…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2014-0142

  QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zer…

  qemu Debian
  Aug 10, 2017
• Unscored —
  CVE-2014-0143

  Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of …

  qemu Debian
  Aug 10, 2017
• Unscored —
  CVE-2014-0144

  QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential …

  qemu Debian
  Feb 11, 2020
• Unscored —
  CVE-2014-0145

  Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (cr…

  qemu Debian
  Aug 10, 2017
• Unscored —
  CVE-2014-0146

  The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a …

  qemu Debian
  Aug 10, 2017
• Unscored —
  CVE-2014-0147

  Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are v…

  qemu Virtualization Debian
  Feb 11, 2020
• Unscored —
  CVE-2014-0148

  Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when ca…

  qemu Virtualization Debian
  Feb 11, 2020
• Unscored —
  CVE-2014-0150

  Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local gues…

  qemu qemu Debian Ubuntu
  Apr 18, 2014
• Unscored —
  CVE-2014-0182

  Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote at…

  qemu qemu Debian Ubuntu
  Nov 4, 2014
• Unscored —
  CVE-2014-2894

  Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local user…

  qemu qemu Debian Ubuntu
  Apr 23, 2014
• Unscored —
  CVE-2014-3461

  hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a …

  qemu qemu Debian Ubuntu
  Nov 4, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1063182
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1066334
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1066342
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1066361
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1066382
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1066384
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1066401
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1078201
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1078212
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1078232
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1078846
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1078848
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1078885
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1079140
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1079240
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1087971
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1088986
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1095812
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1096821
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0674.json
• report
  https://access.redhat.com/security/cve/CVE-2013-4148
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4148
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4148
• report
  https://access.redhat.com/security/cve/CVE-2013-4151
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4151
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4151
• report
  https://access.redhat.com/security/cve/CVE-2013-4535
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4535
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4535
• report
  https://access.redhat.com/security/cve/CVE-2013-4536
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4536
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4536
• report
  https://access.redhat.com/security/cve/CVE-2013-4541
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4541
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4541
• report
  https://access.redhat.com/security/cve/CVE-2013-4542
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4542
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4542