Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Fixed packages 20

Vulnerabilities 3

• Medium 5.4
  CVE-2017-2633

  An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This fl…

  QEMU QEMU qemu qemu Virtualization Debian Ubuntu
  Jul 27, 2018
• Unscored —
  CVE-2016-4020

  The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local…

  qemu qemu Debian Ubuntu
  May 25, 2016
• Unscored —
  CVE-2017-5898

  Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when …

  qemu qemu qemu Debian Ubuntu Alpine
  Mar 15, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1151859
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1299875
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1313686
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1342489
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1361488
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1375507
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1377087
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1377977
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1378541
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1419699
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1419898
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1425939
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1427176
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1430606
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1433920
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1436280
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1440987
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1441778
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1451470
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1452067
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1456983
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1856.json
• report
  https://access.redhat.com/security/cve/CVE-2016-4020
• advisory
  https://www.cve.org/CVERecord?id=CVE-2016-4020
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2016-4020
• report
  https://access.redhat.com/security/cve/CVE-2017-2633
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-2633
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-2633
• report
  https://access.redhat.com/security/cve/CVE-2017-5898
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-5898
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-5898