Skip to content
OpenAdvisories
High RHSA-2018:1104 8 CVEs

Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::hypervisor qemu-img-rhev 10:2.10.0-21.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor qemu-kvm-common-rhev 10:2.10.0-21.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor qemu-kvm-rhev 10:2.10.0-21.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor qemu-kvm-rhev-debuginfo 10:2.10.0-21.el7
Red Hat · RHEL 7 enterprise_linux:7::hypervisor qemu-kvm-tools-rhev 10:2.10.0-21.el7

Vulnerabilities 8

  • High 8.3
    CVE-2017-15118 Public exploit EPSS 12%

    A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a clien…

    QEMU QEMU qemu Virtualization Debian
  • Medium 5.8
    CVE-2017-15119

    The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. …

    QEMU QEMU qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2017-13672 Public exploit

    QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-13673

    The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used cau…

    qemu Debian
  • Unscored —
    CVE-2017-13711

    Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to …

    qemu Debian
  • Unscored —
    CVE-2017-15124

    VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory a…

    QEMU QEMU qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2017-15268

    Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, rel…

    qemu Debian
  • Unscored —
    CVE-2018-5683

    The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds r…

    qemu qemu Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1139507
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1178472
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1212715
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1213786
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1285044
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1305398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1320114
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1344299
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1372583
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1378241
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1390346
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1390348
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1398633
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1406803
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1414049
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1433670
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1434321
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1437113
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1441460
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1441684
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1441938
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1443877
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1445834
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1446565
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1447258
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1447413
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1448344
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1449067
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1449609
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1449991
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1451015
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1451189
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1451269
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1453167
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1454362
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1454367
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1455074
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1457662