Skip to content
OpenAdvisories
Unscored RHSA-2019:2166 2 CVEs

Red Hat Security Advisory: qemu-kvm-ma security and bug fix update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::server qemu-img-ma 10:2.12.0-33.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-common-ma 10:2.12.0-33.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-ma 10:2.12.0-33.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-ma-debuginfo 10:2.12.0-33.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-tools-ma 10:2.12.0-33.el7

Vulnerabilities 2

  • Unscored —
    CVE-2018-17963

    qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2019-6501

    In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

    qemu Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1636777
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1668160
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1678898
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2166.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-17963
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-17963
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-17963
  • report
    https://access.redhat.com/security/cve/CVE-2019-6501
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-6501
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-6501