Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 6 enterprise_linux:6::client | qemu-guest-agent | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::client | qemu-img | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::client | qemu-kvm | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::client | qemu-kvm-debuginfo | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::client | qemu-kvm-tools | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | qemu-guest-agent | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | qemu-img | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | qemu-kvm | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | qemu-kvm-debuginfo | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | qemu-kvm-tools | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::server | qemu-guest-agent | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::server | qemu-img | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::server | qemu-kvm | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::server | qemu-kvm-debuginfo | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::server | qemu-kvm-tools | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | qemu-guest-agent | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | qemu-img | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | qemu-kvm | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | qemu-kvm-debuginfo | 2:0.12.1.2-2.506.el6_10.5 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | qemu-kvm-tools | 2:0.12.1.2-2.506.el6_10.5 |
Vulnerabilities 5
-
Medium 6.5
Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could le…
-
Unscored —
m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.
-
Unscored —
Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.
-
Unscored —
interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.
-
Unscored —
In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1581013
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1586245
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1636773
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1664205
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1712670
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2892.json
-
report
https://access.redhat.com/security/cve/CVE-2018-10839
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-10839
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-10839
-
report
https://access.redhat.com/security/cve/CVE-2018-11806
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-11806
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-11806
-
report
https://access.redhat.com/security/cve/CVE-2018-17962
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-17962
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-17962
-
report
https://access.redhat.com/security/cve/CVE-2019-6778
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-6778
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-6778
-
report
https://access.redhat.com/security/cve/CVE-2019-12155
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-12155
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-12155