Skip to content
OpenAdvisories
Medium RHSA-2017:2392 22 CVEs

Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::hypervisor qemu-img-rhev 10:2.9.0-14.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor qemu-kvm-common-rhev 10:2.9.0-14.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor qemu-kvm-rhev 10:2.9.0-14.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor qemu-kvm-rhev-debuginfo 10:2.9.0-14.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor qemu-kvm-tools-rhev 10:2.9.0-14.el7

Vulnerabilities 22

  • Medium 5.5
    CVE-2017-2630

    A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD…

    QEMU QEMU qemu Virtualization Debian
  • Unscored —
    CVE-2016-10155

    Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause …

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-4020

    The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-6835

    The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS a…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-6888

    Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-7422

    The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators…

    qemu Debian
  • Unscored —
    CVE-2016-7466

    Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, a…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-8576

    The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to …

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-8669

    The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administra…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-8909

    The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators t…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-8910

    The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrato…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9907

    Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-9911

    Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-9921

    Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-9922

    The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-5579

    Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS pri…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-5898

    Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when …

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-5973

    The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users t…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-9310

    QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to …

    qemu Debian
  • Unscored —
    CVE-2017-9373

    Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-9374

    Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-9375

    QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users…

    qemu qemu Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=750801
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=971799
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1032873
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1038963
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1046612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1055093
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1086193
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1159726
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1159728
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1175113
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1179045
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1185172
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1189998
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1193826
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1219541
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1231739
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1248279
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1254422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1256618
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1262277
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1262676
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1264255
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1264258
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1271060
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1274567
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1281407
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1285928
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1291284
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1293975
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1295637
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1299876
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1300768
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1300770
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1313686
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1314131
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1329145
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1333425
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1334398