Skip to content
OpenAdvisories
High RHSA-2018:1113 8 CVEs

Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Published Sep 13, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 25

ReleasePackageFixed in
Red Hat · OpenStack 10 openstack:10::el7 qemu-img-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 10 openstack:10::el7 qemu-kvm-common-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 10 openstack:10::el7 qemu-kvm-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 10 openstack:10::el7 qemu-kvm-rhev-debuginfo 10:2.10.0-21.el7
Red Hat · OpenStack 10 openstack:10::el7 qemu-kvm-tools-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 11 openstack:11::el7 qemu-img-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 11 openstack:11::el7 qemu-kvm-common-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 11 openstack:11::el7 qemu-kvm-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 11 openstack:11::el7 qemu-kvm-rhev-debuginfo 10:2.10.0-21.el7
Red Hat · OpenStack 11 openstack:11::el7 qemu-kvm-tools-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 12 openstack:12::el7 qemu-img-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 12 openstack:12::el7 qemu-kvm-common-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 12 openstack:12::el7 qemu-kvm-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 12 openstack:12::el7 qemu-kvm-rhev-debuginfo 10:2.10.0-21.el7
Red Hat · OpenStack 12 openstack:12::el7 qemu-kvm-tools-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 8 openstack:8::el7 qemu-img-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 8 openstack:8::el7 qemu-kvm-common-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 8 openstack:8::el7 qemu-kvm-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 8 openstack:8::el7 qemu-kvm-rhev-debuginfo 10:2.10.0-21.el7
Red Hat · OpenStack 8 openstack:8::el7 qemu-kvm-tools-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 9 openstack:9::el7 qemu-img-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 9 openstack:9::el7 qemu-kvm-common-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 9 openstack:9::el7 qemu-kvm-rhev 10:2.10.0-21.el7
Red Hat · OpenStack 9 openstack:9::el7 qemu-kvm-rhev-debuginfo 10:2.10.0-21.el7
Red Hat · OpenStack 9 openstack:9::el7 qemu-kvm-tools-rhev 10:2.10.0-21.el7

Vulnerabilities 8

  • High 8.3
    CVE-2017-15118 Public exploit EPSS 12%

    A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a clien…

    QEMU QEMU qemu Virtualization Debian
  • Medium 5.8
    CVE-2017-15119

    The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. …

    QEMU QEMU qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2017-13672 Public exploit

    QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-13673

    The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used cau…

    qemu Debian
  • Unscored —
    CVE-2017-13711

    Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to …

    qemu Debian
  • Unscored —
    CVE-2017-15124

    VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory a…

    QEMU QEMU qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2017-15268

    Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, rel…

    qemu Debian
  • Unscored —
    CVE-2018-5683

    The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds r…

    qemu qemu Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1486400
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1486560
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1486588
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1516925
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1525195
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1549860
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1553107
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1557010
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1557011
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1562826
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1113.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-13672
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-13672
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-13672
  • report
    https://access.redhat.com/security/cve/CVE-2017-13673
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-13673
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-13673
  • report
    https://access.redhat.com/security/cve/CVE-2017-13711
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-13711
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-13711
  • report
    https://access.redhat.com/security/cve/CVE-2017-15118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1516922
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-15118
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-15118
  • report
    https://access.redhat.com/security/cve/CVE-2017-15119
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-15119
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-15119
  • report
    https://access.redhat.com/security/cve/CVE-2017-15124
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-15124
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-15124
  • report
    https://access.redhat.com/security/cve/CVE-2017-15268
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1496879
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-15268
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-15268
  • report
    https://access.redhat.com/security/cve/CVE-2018-5683
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1530356
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-5683
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-5683