Skip to content
OpenAdvisories
Unscored RHSA-2014:0927 15 CVEs

Red Hat Security Advisory: qemu-kvm security and bug fix update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 36

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client libcacard 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::client libcacard-devel 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::client libcacard-tools 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::client qemu-guest-agent 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::client qemu-img 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm-common 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm-debuginfo 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm-tools 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::computenode libcacard 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::computenode libcacard-devel 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::computenode libcacard-tools 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-guest-agent 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-img 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm-common 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm-debuginfo 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm-tools 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::server libcacard 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::server libcacard-devel 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::server libcacard-tools 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::server qemu-guest-agent 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::server qemu-img 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-common 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-debuginfo 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-tools 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::workstation libcacard 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::workstation libcacard-devel 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::workstation libcacard-tools 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-guest-agent 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-img 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm-common 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm-debuginfo 10:1.5.3-60.el7_0.5
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm-tools 10:1.5.3-60.el7_0.5

Vulnerabilities 15

  • Unscored —
    CVE-2013-4148

    Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4149

    Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow re…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4150

    The virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2 allows remote attackers to…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4151

    The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4527

    Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vect…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4529

    Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and poss…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4535

    The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary f…

    qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2013-4536

    An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to …

    qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2013-4541

    The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrar…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4542

    The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execut…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-6399

    Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to exe…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2014-0182

    Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote at…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2014-0222

    Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a deni…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2014-0223

    Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2014-3461

    hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a …

    qemu qemu Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066334
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066337
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066340
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066342
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066347
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066353
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066361
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066382
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066384
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066401
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1088986
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1096821
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1097216
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1097222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1110188
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1110189
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1110191
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1110219
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0927.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-4148
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4148
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4148
  • report
    https://access.redhat.com/security/cve/CVE-2013-4149
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4149
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4149
  • report
    https://access.redhat.com/security/cve/CVE-2013-4150
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4150
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4150
  • report
    https://access.redhat.com/security/cve/CVE-2013-4151
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4151
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4151
  • report
    https://access.redhat.com/security/cve/CVE-2013-4527
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4527
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4527
  • report
    https://access.redhat.com/security/cve/CVE-2013-4529
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4529
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4529
  • report
    https://access.redhat.com/security/cve/CVE-2013-4535