Skip to content
OpenAdvisories
Unscored RHSA-2014:0743 10 CVEs

Red Hat Security Advisory: qemu-kvm security and bug fix update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client qemu-guest-agent 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::client qemu-img 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::client qemu-kvm 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::client qemu-kvm-debuginfo 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::client qemu-kvm-tools 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::computenode qemu-guest-agent 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::computenode qemu-img 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::computenode qemu-kvm 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::computenode qemu-kvm-debuginfo 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::computenode qemu-kvm-tools 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::server qemu-guest-agent 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::server qemu-img 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::server qemu-kvm 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::server qemu-kvm-debuginfo 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::server qemu-kvm-tools 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::workstation qemu-guest-agent 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::workstation qemu-img 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::workstation qemu-kvm 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::workstation qemu-kvm-debuginfo 2:0.12.1.2-2.415.el6_5.10
Red Hat · RHEL 6 enterprise_linux:6::workstation qemu-kvm-tools 2:0.12.1.2-2.415.el6_5.10

Vulnerabilities 10

  • Unscored —
    CVE-2013-4148

    Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4151

    The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4535

    The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary f…

    qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2013-4536

    An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to …

    qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2013-4541

    The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrar…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4542

    The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execut…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-6399

    Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to exe…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2014-0182

    Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote at…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2014-2894

    Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local user…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2014-3461

    hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a …

    qemu qemu Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066334
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066342
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066361
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066382
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066384
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066401
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1087971
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1088986
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1096821
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1100575
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0743.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-4148
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4148
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4148
  • report
    https://access.redhat.com/security/cve/CVE-2013-4151
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4151
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4151
  • report
    https://access.redhat.com/security/cve/CVE-2013-4535
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4535
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4535
  • report
    https://access.redhat.com/security/cve/CVE-2013-4536
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4536
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4536
  • report
    https://access.redhat.com/security/cve/CVE-2013-4541
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4541
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4541
  • report
    https://access.redhat.com/security/cve/CVE-2013-4542
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4542
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4542
  • report
    https://access.redhat.com/security/cve/CVE-2013-6399
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6399
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6399
  • report
    https://access.redhat.com/security/cve/CVE-2014-0182
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0182
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0182
  • report
    https://access.redhat.com/security/cve/CVE-2014-2894
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-2894
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-2894