Skip to content
OpenAdvisories
Unscored RHSA-2017:2408 23 CVEs

Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 30

ReleasePackageFixed in
Red Hat · OpenStack 10 openstack:10::el7 qemu-img-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 10 openstack:10::el7 qemu-kvm-common-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 10 openstack:10::el7 qemu-kvm-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 10 openstack:10::el7 qemu-kvm-rhev-debuginfo 10:2.9.0-10.el7
Red Hat · OpenStack 10 openstack:10::el7 qemu-kvm-tools-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 11 openstack:11::el7 qemu-img-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 11 openstack:11::el7 qemu-kvm-common-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 11 openstack:11::el7 qemu-kvm-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 11 openstack:11::el7 qemu-kvm-rhev-debuginfo 10:2.9.0-10.el7
Red Hat · OpenStack 11 openstack:11::el7 qemu-kvm-tools-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 6 openstack:6::el7 qemu-img-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 6 openstack:6::el7 qemu-kvm-common-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 6 openstack:6::el7 qemu-kvm-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 6 openstack:6::el7 qemu-kvm-rhev-debuginfo 10:2.9.0-10.el7
Red Hat · OpenStack 6 openstack:6::el7 qemu-kvm-tools-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 7 openstack:7::el7 qemu-img-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 7 openstack:7::el7 qemu-kvm-common-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 7 openstack:7::el7 qemu-kvm-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 7 openstack:7::el7 qemu-kvm-rhev-debuginfo 10:2.9.0-10.el7
Red Hat · OpenStack 7 openstack:7::el7 qemu-kvm-tools-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 8 openstack:8::el7 qemu-img-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 8 openstack:8::el7 qemu-kvm-common-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 8 openstack:8::el7 qemu-kvm-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 8 openstack:8::el7 qemu-kvm-rhev-debuginfo 10:2.9.0-10.el7
Red Hat · OpenStack 8 openstack:8::el7 qemu-kvm-tools-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 9 openstack:9::el7 qemu-img-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 9 openstack:9::el7 qemu-kvm-common-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 9 openstack:9::el7 qemu-kvm-rhev 10:2.9.0-10.el7
Red Hat · OpenStack 9 openstack:9::el7 qemu-kvm-rhev-debuginfo 10:2.9.0-10.el7
Red Hat · OpenStack 9 openstack:9::el7 qemu-kvm-tools-rhev 10:2.9.0-10.el7

Vulnerabilities 23

  • Unscored —
    CVE-2016-10155

    Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause …

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-4020

    The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-6888

    Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-7422

    The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators…

    qemu Debian
  • Unscored —
    CVE-2016-7466

    Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, a…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-8576

    The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to …

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-8669

    The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administra…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-8909

    The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators t…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-8910

    The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrato…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9907

    Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-9911

    Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-9921

    Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-9922

    The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-5579

    Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS pri…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-5973

    The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users t…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-6414

    Memory leak in the vcard_apdu_new function in card_7816.c in libcacard before 2.5.3 allows local guest OS users to caus…

    libcacard libcacard Debian Ubuntu
  • Unscored —
    CVE-2017-8309

    Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (mem…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-8379

    Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-9310

    QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to …

    qemu Debian
  • Unscored —
    CVE-2017-9373

    Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-9374

    Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-9375

    QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-9524

    The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows…

    qemu Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1313686
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1333425
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1334398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1369031
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1376755
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1377837
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1384909
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1388046
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1388052
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1402265
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1402272
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1415199
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1416157
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421626
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1427833
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1446517
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1446547
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1452620
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458270
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1458744
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1459132
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1459661
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1459663
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1459664
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1459666
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1459667
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1459668
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1460170
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2408.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-4020
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4020
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4020
  • report
    https://access.redhat.com/security/cve/CVE-2016-6888
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-6888
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-6888
  • report
    https://access.redhat.com/security/cve/CVE-2016-7422
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-7422
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-7422