Skip to content
OpenAdvisories
Unscored RHSA-2018:0816 5 CVEs

Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client qemu-img 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm-common 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm-debuginfo 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm-tools 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-img 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm-common 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm-debuginfo 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm-tools 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-img 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-common 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-debuginfo 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-tools 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-img 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm-common 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm-debuginfo 10:1.5.3-156.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm-tools 10:1.5.3-156.el7

Vulnerabilities 5

  • Unscored —
    CVE-2017-13672 Public exploit

    QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-13711

    Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to …

    qemu Debian
  • Unscored —
    CVE-2017-15124

    VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory a…

    QEMU QEMU qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2017-15268

    Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, rel…

    qemu Debian
  • Unscored —
    CVE-2018-5683

    The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds r…

    qemu qemu Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1411490
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1417864
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1435352
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1450396
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1455451
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1459725
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1460872
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1461672
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1470244
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1473536
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1476641
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1486400
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1486560
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1491434
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1492559
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1494181
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1496879
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1511802
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1520793
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1525195
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1530356
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1536883
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1538866
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0816.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-13672
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-13672
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-13672
  • report
    https://access.redhat.com/security/cve/CVE-2017-13711
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-13711
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-13711
  • report
    https://access.redhat.com/security/cve/CVE-2017-15124
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-15124
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-15124
  • report
    https://access.redhat.com/security/cve/CVE-2017-15268
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-15268
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-15268
  • report
    https://access.redhat.com/security/cve/CVE-2018-5683