Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update

Fixed packages 10

Vulnerabilities 9

• High 7.5
  CVE-2018-17958

  Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.

  qemu qemu Debian Ubuntu
  Oct 9, 2018
• Medium 5.9
  CVE-2018-12130

  Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execut…

  Intel Central Processing Units (CPUs) linux-raspi2 linux-hwe Debian Ubuntu Alpine
  May 30, 2019
• Medium 5.6
  CVE-2018-12126

  Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative exec…

  Intel Central ProcCVE-2018-12126essing Units (CPUs) linux-raspi2 linux-hwe Debian Ubuntu Alpine
  May 30, 2019
• Medium 5.6
  CVE-2018-12127

  Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution …

  Intel Central Processing Units (CPUs) linux-raspi2 linux-hwe Debian Ubuntu Alpine
  May 30, 2019
• Medium 5.6
  CVE-2019-11091

  Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing specu…

  Intel Central Processing Units (CPUs) linux-raspi2 linux-hwe Debian Ubuntu Alpine
  May 30, 2019
• Unscored —
  CVE-2018-17963

  qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause…

  qemu qemu Debian Ubuntu
  Oct 9, 2018
• Unscored —
  CVE-2018-20815

  In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow …

  qemu qemu Debian Ubuntu
  May 31, 2019
• Unscored —
  CVE-2019-6501

  In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

  qemu Debian
  Mar 17, 2019
• Unscored —
  CVE-2019-9824

  tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leadi…

  qemu qemu slirp4netns Debian Ubuntu
  Jun 3, 2019

References

• article
  https://access.redhat.com/security/vulnerabilities/mds
• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1508708
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1526313
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1531888
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1551486
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1585155
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1597482
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1598119
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1603104
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1607768
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1608226
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1610461
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1614302
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1614610
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1619778
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1620373
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1623986
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1624009
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1627272
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1628098
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1629056
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1629717
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1629720
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1631052
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1631227
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1631615
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1631877
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1633150
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1633536
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1636712
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1636777
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1642551
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646781
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646784
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1648236
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1656913
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1666336
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1666884