Skip to content
OpenAdvisories
High RHSA-2019:2425 6 CVEs

Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 15

ReleasePackageFixed in
Red Hat · OpenStack 10 openstack:10::el7 qemu-img-rhev 10:2.12.0-33.el7
Red Hat · OpenStack 10 openstack:10::el7 qemu-kvm-common-rhev 10:2.12.0-33.el7
Red Hat · OpenStack 10 openstack:10::el7 qemu-kvm-rhev 10:2.12.0-33.el7
Red Hat · OpenStack 10 openstack:10::el7 qemu-kvm-rhev-debuginfo 10:2.12.0-33.el7
Red Hat · OpenStack 10 openstack:10::el7 qemu-kvm-tools-rhev 10:2.12.0-33.el7
Red Hat · OpenStack 13 openstack:13::el7 qemu-img-rhev 10:2.12.0-33.el7
Red Hat · OpenStack 13 openstack:13::el7 qemu-kvm-common-rhev 10:2.12.0-33.el7
Red Hat · OpenStack 13 openstack:13::el7 qemu-kvm-rhev 10:2.12.0-33.el7
Red Hat · OpenStack 13 openstack:13::el7 qemu-kvm-rhev-debuginfo 10:2.12.0-33.el7
Red Hat · OpenStack 13 openstack:13::el7 qemu-kvm-tools-rhev 10:2.12.0-33.el7
Red Hat · OpenStack 14 openstack:14::el7 qemu-img-rhev 10:2.12.0-33.el7
Red Hat · OpenStack 14 openstack:14::el7 qemu-kvm-common-rhev 10:2.12.0-33.el7
Red Hat · OpenStack 14 openstack:14::el7 qemu-kvm-rhev 10:2.12.0-33.el7
Red Hat · OpenStack 14 openstack:14::el7 qemu-kvm-rhev-debuginfo 10:2.12.0-33.el7
Red Hat · OpenStack 14 openstack:14::el7 qemu-kvm-tools-rhev 10:2.12.0-33.el7

Vulnerabilities 6

  • High 7.5
    CVE-2018-17958

    Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2018-15746

    qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishan…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2018-17963

    qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2019-6501

    In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

    qemu Debian
  • Unscored —
    CVE-2019-6778

    In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.

    qemu qemu slirp4netns Debian Ubuntu
  • Unscored —
    CVE-2019-9824

    tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leadi…

    qemu qemu slirp4netns Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1615637
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1636712
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1636777
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1664205
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1668160
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1678515
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1728358
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1728359
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1728360
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2425.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-15746
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-15746
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-15746
  • report
    https://access.redhat.com/security/cve/CVE-2018-17958
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-17958
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-17958
  • report
    https://access.redhat.com/security/cve/CVE-2018-17963
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-17963
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-17963
  • report
    https://access.redhat.com/security/cve/CVE-2019-6501
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-6501
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-6501
  • report
    https://access.redhat.com/security/cve/CVE-2019-6778
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-6778
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-6778
  • report
    https://access.redhat.com/security/cve/CVE-2019-9824
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-9824
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-9824