Red Hat Security Advisory: qemu-kvm-rhev security update

Fixed packages 4

Vulnerabilities 3

• Medium 5.5
  CVE-2017-2615

  Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access iss…

  QEMU display qemu xen Debian Ubuntu Alpine
  Jul 2, 2018
• Medium 5.5
  CVE-2017-2620

  Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds…

  QEMU QEMU xen qemu Virtualization Debian Ubuntu Alpine
  Jul 27, 2018
• Unscored —
  CVE-2016-2857

  The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service …

  qemu qemu Debian Ubuntu
  Apr 8, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1296567
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1418200
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1420484
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0334.json
• report
  https://access.redhat.com/security/cve/CVE-2016-2857
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-2857
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-2857
• report
  https://access.redhat.com/security/cve/CVE-2017-2615
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-2615
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-2615
• report
  https://access.redhat.com/security/cve/CVE-2017-2620
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-2620
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-2620
• article
  https://xenbits.xen.org/xsa/advisory-209.html