Skip to content
OpenAdvisories
Unscored RHSA-2014:1268 15 CVEs

Red Hat Security Advisory: qemu-kvm-rhev security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el7 libcacard-devel-rhev 10:1.5.3-60.el7_0.7
Red Hat · OpenStack 5 openstack:5::el7 libcacard-rhev 10:1.5.3-60.el7_0.7
Red Hat · OpenStack 5 openstack:5::el7 libcacard-tools-rhev 10:1.5.3-60.el7_0.7
Red Hat · OpenStack 5 openstack:5::el7 qemu-img-rhev 10:1.5.3-60.el7_0.7
Red Hat · OpenStack 5 openstack:5::el7 qemu-kvm-common-rhev 10:1.5.3-60.el7_0.7
Red Hat · OpenStack 5 openstack:5::el7 qemu-kvm-rhev 10:1.5.3-60.el7_0.7
Red Hat · OpenStack 5 openstack:5::el7 qemu-kvm-rhev-debuginfo 10:1.5.3-60.el7_0.7
Red Hat · OpenStack 5 openstack:5::el7 qemu-kvm-tools-rhev 10:1.5.3-60.el7_0.7

Vulnerabilities 15

  • Unscored —
    CVE-2013-4148

    Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4149

    Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow re…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4150

    The virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2 allows remote attackers to…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4151

    The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4527

    Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vect…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4529

    Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and poss…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4535

    The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary f…

    qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2013-4536

    An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to …

    qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2013-4541

    The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrar…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-4542

    The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execut…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2013-6399

    Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to exe…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2014-0182

    Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote at…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2014-0222

    Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a deni…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2014-0223

    Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2014-3461

    hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a …

    qemu qemu Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066334
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066337
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066340
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066342
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066347
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066353
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066361
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066382
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066384
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066401
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1088986
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1096821
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1097216
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1097222
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1268.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-4148
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4148
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4148
  • report
    https://access.redhat.com/security/cve/CVE-2013-4149
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4149
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4149
  • report
    https://access.redhat.com/security/cve/CVE-2013-4150
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4150
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4150
  • report
    https://access.redhat.com/security/cve/CVE-2013-4151
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4151
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4151
  • report
    https://access.redhat.com/security/cve/CVE-2013-4527
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4527
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4527
  • report
    https://access.redhat.com/security/cve/CVE-2013-4529
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4529
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4529
  • report
    https://access.redhat.com/security/cve/CVE-2013-4535
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4535
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4535
  • report
    https://access.redhat.com/security/cve/CVE-2013-4536
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4536