Action not permitted
Modal body text goes here.
cve-2017-2633
Vulnerability from cvelistv5
Published
2018-07-27 19:00
Modified
2024-08-05 14:02
Severity ?
EPSS score ?
Summary
An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
References
▼ | URL | Tags | |
---|---|---|---|
secalert@redhat.com | http://www.openwall.com/lists/oss-security/2017/02/23/1 | Mailing List, Patch, Third Party Advisory | |
secalert@redhat.com | http://www.securityfocus.com/bid/96417 | Third Party Advisory, VDB Entry | |
secalert@redhat.com | https://access.redhat.com/errata/RHSA-2017:1205 | Third Party Advisory | |
secalert@redhat.com | https://access.redhat.com/errata/RHSA-2017:1206 | Third Party Advisory | |
secalert@redhat.com | https://access.redhat.com/errata/RHSA-2017:1441 | Third Party Advisory | |
secalert@redhat.com | https://access.redhat.com/errata/RHSA-2017:1856 | Third Party Advisory | |
secalert@redhat.com | https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633 | Issue Tracking, Patch, Third Party Advisory | |
secalert@redhat.com | https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7 | ||
secalert@redhat.com | https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T14:02:06.898Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "[oss-security] 20170223 CVE-2017-2633 Qemu: VNC: memory corruption due to unchecked resolution limit", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "http://www.openwall.com/lists/oss-security/2017/02/23/1" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef" }, { "name": "RHSA-2017:1206", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:1206" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633" }, { "name": "RHSA-2017:1441", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:1441" }, { "name": "96417", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/96417" }, { "name": "RHSA-2017:1856", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:1856" }, { "name": "RHSA-2017:1205", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:1205" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Qemu:", "vendor": "QEMU", "versions": [ { "status": "affected", "version": "1.7.2" } ] } ], "datePublic": "2016-12-01T00:00:00", "descriptions": [ { "lang": "en", "value": "An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process." } ], "metrics": [ { "cvssV3_0": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "version": "3.0" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-120", "description": "CWE-120", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2018-07-28T09:57:01", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "references": [ { "name": "[oss-security] 20170223 CVE-2017-2633 Qemu: VNC: memory corruption due to unchecked resolution limit", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "http://www.openwall.com/lists/oss-security/2017/02/23/1" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef" }, { "name": "RHSA-2017:1206", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:1206" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633" }, { "name": "RHSA-2017:1441", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:1441" }, { "name": "96417", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/96417" }, { "name": "RHSA-2017:1856", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:1856" }, { "name": "RHSA-2017:1205", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:1205" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2017-2633", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Qemu:", "version": { "version_data": [ { "version_value": "1.7.2" } ] } } ] }, "vendor_name": "QEMU" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process." } ] }, "impact": { "cvss": [ [ { "vectorString": "5.4/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "version": "3.0" } ], [ { "vectorString": "3.8/AV:A/AC:M/Au:S/C:N/I:P/A:P", "version": "2.0" } ] ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-120" } ] } ] }, "references": { "reference_data": [ { "name": "[oss-security] 20170223 CVE-2017-2633 Qemu: VNC: memory corruption due to unchecked resolution limit", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2017/02/23/1" }, { "name": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=bea60dd7679364493a0d7f5b54316c767cf894ef", "refsource": "CONFIRM", "url": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=bea60dd7679364493a0d7f5b54316c767cf894ef" }, { "name": "RHSA-2017:1206", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1206" }, { "name": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=9f64916da20eea67121d544698676295bbb105a7", "refsource": "CONFIRM", "url": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=9f64916da20eea67121d544698676295bbb105a7" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633" }, { "name": "RHSA-2017:1441", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1441" }, { "name": "96417", "refsource": "BID", "url": "http://www.securityfocus.com/bid/96417" }, { "name": "RHSA-2017:1856", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1856" }, { "name": "RHSA-2017:1205", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1205" } ] } } } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2017-2633", "datePublished": "2018-07-27T19:00:00", "dateReserved": "2016-12-01T00:00:00", "dateUpdated": "2024-08-05T14:02:06.898Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2017-2633\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2018-07-27T19:29:00.533\",\"lastModified\":\"2023-11-07T02:43:53.117\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process.\"},{\"lang\":\"es\",\"value\":\"Se ha encontrado un problema de acceso a la memoria fuera de l\u00edmites en Quick Emulator (QEMU) en versiones anteriores a la 1.7.2 en el controlador de pantalla VNC. Esta vulnerabilidad podr\u00eda ocurrir mientras se refresca la superficie del display de VNC en el \\\"vnc_refresh_server_surface\\\". Un usuario dentro de un guest podr\u00eda usar esta vulnerabilidad para provocar el cierre inesperado del proceso de QEMU.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6},{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\"},\"exploitabilityScore\":2.3,\"impactScore\":2.7}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:N/I:N/A:P\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\",\"baseScore\":4.0},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"},{\"lang\":\"en\",\"value\":\"CWE-787\"}]},{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-120\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.7.2\",\"matchCriteriaId\":\"28E9188E-054F-4D32-ABB7-79F588AFB98E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D99A687E-EAE6-417E-A88E-D0082BC194CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}],\"references\":[{\"url\":\"http://www.openwall.com/lists/oss-security/2017/02/23/1\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/96417\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1205\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1206\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1441\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1856\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef\",\"source\":\"secalert@redhat.com\"}]}}" } }
rhsa-2017_1856
Vulnerability from csaf_redhat
Published
2017-08-01 14:03
Modified
2024-11-05 20:07
Summary
Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update
Notes
Topic
An update for qemu-kvm is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm package provides the user-space component for running virtual machines that use KVM.
Security Fix(es):
* An out-of-bounds memory access issue was found in Quick Emulator (QEMU) in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process. (CVE-2017-2633)
* An integer overflow flaw was found in Quick Emulator (QEMU) in the CCID Card device support. The flaw could occur while passing messages via command/response packets to and from the host. A privileged user inside a guest could use this flaw to crash the QEMU process. (CVE-2017-5898)
* An information exposure flaw was found in Quick Emulator (QEMU) in Task Priority Register (TPR) optimizations for 32-bit Windows guests. The flaw could occur while accessing TPR. A privileged user inside a guest could use this issue to read portions of the host memory. (CVE-2016-4020)
Red Hat would like to thank Li Qiang (360.cn Inc.) for reporting CVE-2017-5898 and Donghai Zdh (Alibaba Inc.) for reporting CVE-2016-4020.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for qemu-kvm is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm package provides the user-space component for running virtual machines that use KVM.\n\nSecurity Fix(es):\n\n* An out-of-bounds memory access issue was found in Quick Emulator (QEMU) in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process. (CVE-2017-2633)\n\n* An integer overflow flaw was found in Quick Emulator (QEMU) in the CCID Card device support. The flaw could occur while passing messages via command/response packets to and from the host. A privileged user inside a guest could use this flaw to crash the QEMU process. (CVE-2017-5898)\n\n* An information exposure flaw was found in Quick Emulator (QEMU) in Task Priority Register (TPR) optimizations for 32-bit Windows guests. The flaw could occur while accessing TPR. A privileged user inside a guest could use this issue to read portions of the host memory. (CVE-2016-4020)\n\nRed Hat would like to thank Li Qiang (360.cn Inc.) for reporting CVE-2017-5898 and Donghai Zdh (Alibaba Inc.) for reporting CVE-2016-4020.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:1856", "url": "https://access.redhat.com/errata/RHSA-2017:1856" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html", "url": "https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html" }, { "category": "external", "summary": "1151859", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1151859" }, { "category": "external", "summary": "1299875", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1299875" }, { "category": "external", "summary": "1313686", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1313686" }, { "category": "external", "summary": "1342489", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1342489" }, { "category": "external", "summary": "1361488", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1361488" }, { "category": "external", "summary": "1375507", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1375507" }, { "category": "external", "summary": "1377087", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377087" }, { "category": "external", "summary": "1377977", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377977" }, { "category": "external", "summary": "1378541", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1378541" }, { "category": "external", "summary": "1419699", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419699" }, { "category": "external", "summary": "1419898", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419898" }, { "category": "external", "summary": "1425939", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1425939" }, { "category": "external", "summary": "1427176", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1427176" }, { "category": "external", "summary": "1430606", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430606" }, { "category": "external", "summary": "1433920", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1433920" }, { "category": "external", "summary": "1436280", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1436280" }, { "category": "external", "summary": "1440987", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1440987" }, { "category": "external", "summary": "1441778", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1441778" }, { "category": "external", "summary": "1451470", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1451470" }, { "category": "external", "summary": "1452067", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1452067" }, { "category": "external", "summary": "1456983", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1456983" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1856.json" } ], "title": "Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update", "tracking": { "current_release_date": "2024-11-05T20:07:42+00:00", "generator": { "date": "2024-11-05T20:07:42+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2017:1856", "initial_release_date": "2017-08-01T14:03:36+00:00", "revision_history": [ { "date": "2017-08-01T14:03:36+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-08-01T14:03:36+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:07:42+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-common-10:1.5.3-141.el7.x86_64", "product": { "name": "qemu-kvm-common-10:1.5.3-141.el7.x86_64", "product_id": "qemu-kvm-common-10:1.5.3-141.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-common@1.5.3-141.el7?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "product": { "name": "qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "product_id": "qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-tools@1.5.3-141.el7?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-img-10:1.5.3-141.el7.x86_64", "product": { "name": "qemu-img-10:1.5.3-141.el7.x86_64", "product_id": "qemu-img-10:1.5.3-141.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img@1.5.3-141.el7?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "product": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "product_id": "qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@1.5.3-141.el7?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-10:1.5.3-141.el7.x86_64", "product": { "name": "qemu-kvm-10:1.5.3-141.el7.x86_64", "product_id": "qemu-kvm-10:1.5.3-141.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm@1.5.3-141.el7?arch=x86_64\u0026epoch=10" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-10:1.5.3-141.el7.src", "product": { "name": "qemu-kvm-10:1.5.3-141.el7.src", "product_id": "qemu-kvm-10:1.5.3-141.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm@1.5.3-141.el7?arch=src\u0026epoch=10" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "qemu-img-10:1.5.3-141.el7.ppc64", "product": { "name": "qemu-img-10:1.5.3-141.el7.ppc64", "product_id": "qemu-img-10:1.5.3-141.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img@1.5.3-141.el7?arch=ppc64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "product": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "product_id": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@1.5.3-141.el7?arch=ppc64\u0026epoch=10" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "qemu-img-10:1.5.3-141.el7.ppc64le", "product": { "name": "qemu-img-10:1.5.3-141.el7.ppc64le", "product_id": "qemu-img-10:1.5.3-141.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img@1.5.3-141.el7?arch=ppc64le\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "product": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "product_id": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@1.5.3-141.el7?arch=ppc64le\u0026epoch=10" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-141.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client:qemu-img-10:1.5.3-141.el7.ppc64" }, "product_reference": "qemu-img-10:1.5.3-141.el7.ppc64", "relates_to_product_reference": "7Client" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-141.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client:qemu-img-10:1.5.3-141.el7.ppc64le" }, "product_reference": "qemu-img-10:1.5.3-141.el7.ppc64le", "relates_to_product_reference": "7Client" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client:qemu-img-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-img-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Client" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-141.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client:qemu-kvm-10:1.5.3-141.el7.src" }, "product_reference": "qemu-kvm-10:1.5.3-141.el7.src", "relates_to_product_reference": "7Client" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client:qemu-kvm-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Client" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client:qemu-kvm-common-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-common-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Client" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "relates_to_product_reference": "7Client" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "relates_to_product_reference": "7Client" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Client" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Client" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-141.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64" }, "product_reference": "qemu-img-10:1.5.3-141.el7.ppc64", "relates_to_product_reference": "7ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-141.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64le" }, "product_reference": "qemu-img-10:1.5.3-141.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-img-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-141.el7.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.src" }, "product_reference": "qemu-kvm-10:1.5.3-141.el7.src", "relates_to_product_reference": "7ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional:qemu-kvm-common-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-common-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "relates_to_product_reference": "7ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7ComputeNode-optional" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-141.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server:qemu-img-10:1.5.3-141.el7.ppc64" }, "product_reference": "qemu-img-10:1.5.3-141.el7.ppc64", "relates_to_product_reference": "7Server" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-141.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server:qemu-img-10:1.5.3-141.el7.ppc64le" }, "product_reference": "qemu-img-10:1.5.3-141.el7.ppc64le", "relates_to_product_reference": "7Server" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server:qemu-img-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-img-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Server" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-141.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server:qemu-kvm-10:1.5.3-141.el7.src" }, "product_reference": "qemu-kvm-10:1.5.3-141.el7.src", "relates_to_product_reference": "7Server" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server:qemu-kvm-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Server" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server:qemu-kvm-common-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-common-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Server" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "relates_to_product_reference": "7Server" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "relates_to_product_reference": "7Server" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Server" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Server" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-141.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64" }, "product_reference": "qemu-img-10:1.5.3-141.el7.ppc64", "relates_to_product_reference": "7Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-141.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64le" }, "product_reference": "qemu-img-10:1.5.3-141.el7.ppc64le", "relates_to_product_reference": "7Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation:qemu-img-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-img-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-141.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation:qemu-kvm-10:1.5.3-141.el7.src" }, "product_reference": "qemu-kvm-10:1.5.3-141.el7.src", "relates_to_product_reference": "7Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation:qemu-kvm-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation:qemu-kvm-common-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-common-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "relates_to_product_reference": "7Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "relates_to_product_reference": "7Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Workstation" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-10:1.5.3-141.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" }, "product_reference": "qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "relates_to_product_reference": "7Workstation" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Donghai Zdh" ], "organization": "Alibaba Inc." } ], "cve": "CVE-2016-4020", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2016-03-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1313686" } ], "notes": [ { "category": "description", "text": "An information-exposure flaw was found in Quick Emulator (QEMU) in Task Priority Register (TPR) optimizations for 32-bit Windows guests. The flaw could occur while accessing TPR. A privileged user inside a guest could use this issue to read portions of the host memory.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: i386: leakage of stack memory to guest in kvmvapic.c", "title": "Vulnerability summary" }, { "category": "other", "text": "This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle:\nhttps://access.redhat.com/support/policy/updates/errata/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client:qemu-img-10:1.5.3-141.el7.ppc64", "7Client:qemu-img-10:1.5.3-141.el7.ppc64le", "7Client:qemu-img-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-10:1.5.3-141.el7.src", "7Client:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.src", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64le", "7Server:qemu-img-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-10:1.5.3-141.el7.src", "7Server:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-img-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-10:1.5.3-141.el7.src", "7Workstation:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-4020" }, { "category": "external", "summary": "RHBZ#1313686", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1313686" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-4020", "url": "https://www.cve.org/CVERecord?id=CVE-2016-4020" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4020", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4020" } ], "release_date": "2016-04-07T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-08-01T14:03:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "7Client:qemu-img-10:1.5.3-141.el7.ppc64", "7Client:qemu-img-10:1.5.3-141.el7.ppc64le", "7Client:qemu-img-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-10:1.5.3-141.el7.src", "7Client:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.src", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64le", "7Server:qemu-img-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-10:1.5.3-141.el7.src", "7Server:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-img-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-10:1.5.3-141.el7.src", "7Workstation:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1856" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 3.4, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N", "version": "3.0" }, "products": [ "7Client:qemu-img-10:1.5.3-141.el7.ppc64", "7Client:qemu-img-10:1.5.3-141.el7.ppc64le", "7Client:qemu-img-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-10:1.5.3-141.el7.src", "7Client:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.src", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64le", "7Server:qemu-img-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-10:1.5.3-141.el7.src", "7Server:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-img-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-10:1.5.3-141.el7.src", "7Workstation:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Qemu: i386: leakage of stack memory to guest in kvmvapic.c" }, { "cve": "CVE-2017-2633", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "discovery_date": "2016-12-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1425939" } ], "notes": [ { "category": "description", "text": "An out-of-bounds memory access issue was found in Quick Emulator (QEMU) in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: VNC: memory corruption due to unchecked resolution limit", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client:qemu-img-10:1.5.3-141.el7.ppc64", "7Client:qemu-img-10:1.5.3-141.el7.ppc64le", "7Client:qemu-img-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-10:1.5.3-141.el7.src", "7Client:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.src", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64le", "7Server:qemu-img-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-10:1.5.3-141.el7.src", "7Server:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-img-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-10:1.5.3-141.el7.src", "7Workstation:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-2633" }, { "category": "external", "summary": "RHBZ#1425939", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1425939" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-2633", "url": "https://www.cve.org/CVERecord?id=CVE-2017-2633" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2633", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2633" } ], "release_date": "2016-12-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-08-01T14:03:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "7Client:qemu-img-10:1.5.3-141.el7.ppc64", "7Client:qemu-img-10:1.5.3-141.el7.ppc64le", "7Client:qemu-img-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-10:1.5.3-141.el7.src", "7Client:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.src", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64le", "7Server:qemu-img-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-10:1.5.3-141.el7.src", "7Server:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-img-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-10:1.5.3-141.el7.src", "7Workstation:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1856" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 3.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:S/C:N/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "version": "3.0" }, "products": [ "7Client:qemu-img-10:1.5.3-141.el7.ppc64", "7Client:qemu-img-10:1.5.3-141.el7.ppc64le", "7Client:qemu-img-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-10:1.5.3-141.el7.src", "7Client:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.src", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64le", "7Server:qemu-img-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-10:1.5.3-141.el7.src", "7Server:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-img-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-10:1.5.3-141.el7.src", "7Workstation:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Qemu: VNC: memory corruption due to unchecked resolution limit" }, { "acknowledgments": [ { "names": [ "Li Qiang" ], "organization": "360.cn Inc." } ], "cve": "CVE-2017-5898", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2016-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1419699" } ], "notes": [ { "category": "description", "text": "An integer overflow flaw was found in Quick Emulator (QEMU) in the CCID Card device support. The flaw could occur while passing messages via command/response packets to and from the host. A privileged user inside a guest could use this flaw to crash the QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: usb: integer overflow in emulated_apdu_from_guest", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client:qemu-img-10:1.5.3-141.el7.ppc64", "7Client:qemu-img-10:1.5.3-141.el7.ppc64le", "7Client:qemu-img-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-10:1.5.3-141.el7.src", "7Client:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.src", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64le", "7Server:qemu-img-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-10:1.5.3-141.el7.src", "7Server:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-img-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-10:1.5.3-141.el7.src", "7Workstation:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-5898" }, { "category": "external", "summary": "RHBZ#1419699", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419699" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5898", "url": "https://www.cve.org/CVERecord?id=CVE-2017-5898" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5898", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5898" } ], "release_date": "2017-02-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-08-01T14:03:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "7Client:qemu-img-10:1.5.3-141.el7.ppc64", "7Client:qemu-img-10:1.5.3-141.el7.ppc64le", "7Client:qemu-img-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-10:1.5.3-141.el7.src", "7Client:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.src", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64le", "7Server:qemu-img-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-10:1.5.3-141.el7.src", "7Server:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-img-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-10:1.5.3-141.el7.src", "7Workstation:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1856" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 3.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:S/C:N/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L", "version": "3.0" }, "products": [ "7Client:qemu-img-10:1.5.3-141.el7.ppc64", "7Client:qemu-img-10:1.5.3-141.el7.ppc64le", "7Client:qemu-img-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-10:1.5.3-141.el7.src", "7Client:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Client:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Client:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-img-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.src", "7ComputeNode-optional:qemu-kvm-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7ComputeNode-optional:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7ComputeNode-optional:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64", "7Server:qemu-img-10:1.5.3-141.el7.ppc64le", "7Server:qemu-img-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-10:1.5.3-141.el7.src", "7Server:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Server:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Server:qemu-kvm-tools-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-img-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-img-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-10:1.5.3-141.el7.src", "7Workstation:qemu-kvm-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-common-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.ppc64le", "7Workstation:qemu-kvm-debuginfo-10:1.5.3-141.el7.x86_64", "7Workstation:qemu-kvm-tools-10:1.5.3-141.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Qemu: usb: integer overflow in emulated_apdu_from_guest" } ] }
rhsa-2017_1205
Vulnerability from csaf_redhat
Published
2017-05-09 11:07
Modified
2024-11-05 20:01
Summary
Red Hat Security Advisory: qemu-kvm-rhev security update
Notes
Topic
An update for qemu-kvm-rhev is now available for RHEV 3.X Hypervisor and Agents for RHEL-6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.
Security Fix(es):
* A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. (CVE-2016-9603)
* Quick Emulator (QEMU) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds r/w access issue. The vulnerability could occur while copying VGA data via various bitblt functions. A privileged user inside the guest could use this flaw to crash the QEMU process (DoS) or potentially execute arbitrary code on a host with privileges of the host's QEMU process. (CVE-2017-7980)
* Quick Emulator (QEMU) built with the VNC display driver support is vulnerable to an out-of-bounds memory access issue. The vulnerability could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user/process inside the guest could use this flaw to crash the QEMU process, resulting in a DoS. (CVE-2017-2633)
* Quick Emulator (QEMU) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The vulnerability could occur while copying VGA data using bitblt functions (for example, cirrus_bitblt_rop_fwd_transp_). A privileged user inside a guest could use this flaw to crash the QEMU process, resulting in DoS. (CVE-2017-7718)
Red Hat would like to thank Jiangxin (PSIRT Huawei Inc.) Li Qiang (Qihoo 360 Gear Team) for reporting CVE-2017-7980 and Jiangxin (PSIRT Huawei Inc.) for reporting CVE-2017-7718.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for qemu-kvm-rhev is now available for RHEV 3.X Hypervisor and Agents for RHEL-6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.\n\nSecurity Fix(es):\n\n* A heap buffer overflow flaw was found in QEMU\u0027s Cirrus CLGD 54xx VGA emulator\u0027s VNC display driver support; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. (CVE-2016-9603)\n\n* Quick Emulator (QEMU) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds r/w access issue. The vulnerability could occur while copying VGA data via various bitblt functions. A privileged user inside the guest could use this flaw to crash the QEMU process (DoS) or potentially execute arbitrary code on a host with privileges of the host\u0027s QEMU process. (CVE-2017-7980)\n\n* Quick Emulator (QEMU) built with the VNC display driver support is vulnerable to an out-of-bounds memory access issue. The vulnerability could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user/process inside the guest could use this flaw to crash the QEMU process, resulting in a DoS. (CVE-2017-2633)\n\n* Quick Emulator (QEMU) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The vulnerability could occur while copying VGA data using bitblt functions (for example, cirrus_bitblt_rop_fwd_transp_). A privileged user inside a guest could use this flaw to crash the QEMU process, resulting in DoS. (CVE-2017-7718)\n\nRed Hat would like to thank Jiangxin (PSIRT Huawei Inc.) Li Qiang (Qihoo 360 Gear Team) for reporting CVE-2017-7980 and Jiangxin (PSIRT Huawei Inc.) for reporting CVE-2017-7718.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:1205", "url": "https://access.redhat.com/errata/RHSA-2017:1205" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1425939", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1425939" }, { "category": "external", "summary": "1430056", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430056" }, { "category": "external", "summary": "1443441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443441" }, { "category": "external", "summary": "1444371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1444371" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1205.json" } ], "title": "Red Hat Security Advisory: qemu-kvm-rhev security update", "tracking": { "current_release_date": "2024-11-05T20:01:01+00:00", "generator": { "date": "2024-11-05T20:01:01+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2017:1205", "initial_release_date": "2017-05-09T11:07:02+00:00", "revision_history": [ { "date": "2017-05-09T11:07:02+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-05-09T11:07:02+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:01:01+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "RHEV Agents (vdsm)", "product": { "name": "RHEV Agents (vdsm)", "product_id": "6Server-RHEV-Agents", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:6::hypervisor" } } } ], "category": "product_family", "name": "Red Hat Virtualization" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img-rhev@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev-tools@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev-debuginfo@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "product": { "name": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "product_id": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev@0.12.1.2-2.503.el6_9.3?arch=src\u0026epoch=2" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of RHEV Agents (vdsm)", "product_id": "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-RHEV-Agents" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src as a component of RHEV Agents (vdsm)", "product_id": "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src" }, "product_reference": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "relates_to_product_reference": "6Server-RHEV-Agents" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of RHEV Agents (vdsm)", "product_id": "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-RHEV-Agents" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of RHEV Agents (vdsm)", "product_id": "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-RHEV-Agents" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of RHEV Agents (vdsm)", "product_id": "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-RHEV-Agents" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9603", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2016-11-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1430056" } ], "notes": [ { "category": "description", "text": "A heap buffer overflow flaw was found in QEMU\u0027s Cirrus CLGD 54xx VGA emulator\u0027s VNC display driver support; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: cirrus: heap buffer overflow via vnc connection", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9603" }, { "category": "external", "summary": "RHBZ#1430056", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430056" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9603", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9603" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9603", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9603" } ], "release_date": "2017-03-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-09T11:07:02+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1205" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "Qemu: cirrus: heap buffer overflow via vnc connection" }, { "cve": "CVE-2017-2633", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "discovery_date": "2016-12-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1425939" } ], "notes": [ { "category": "description", "text": "An out-of-bounds memory access issue was found in Quick Emulator (QEMU) in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: VNC: memory corruption due to unchecked resolution limit", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-2633" }, { "category": "external", "summary": "RHBZ#1425939", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1425939" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-2633", "url": "https://www.cve.org/CVERecord?id=CVE-2017-2633" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2633", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2633" } ], "release_date": "2016-12-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-09T11:07:02+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1205" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 3.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:S/C:N/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "version": "3.0" }, "products": [ "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Qemu: VNC: memory corruption due to unchecked resolution limit" }, { "acknowledgments": [ { "names": [ "Jiangxin" ], "organization": "PSIRT Huawei Inc." } ], "cve": "CVE-2017-7718", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-03-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443441" } ], "notes": [ { "category": "description", "text": "An out-of-bounds access issue was found in QEMU\u0027s Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data using bitblt functions (for example, cirrus_bitblt_rop_fwd_transp_). A privileged user inside a guest could use this flaw to crash the QEMU process, resulting in denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: display: cirrus: OOB read access issue", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-7718" }, { "category": "external", "summary": "RHBZ#1443441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443441" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-7718", "url": "https://www.cve.org/CVERecord?id=CVE-2017-7718" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-7718", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7718" } ], "release_date": "2017-03-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-09T11:07:02+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1205" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 2.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:A/AC:H/Au:S/C:P/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L", "version": "3.0" }, "products": [ "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Qemu: display: cirrus: OOB read access issue" }, { "acknowledgments": [ { "names": [ "Jiangxin" ], "organization": "PSIRT Huawei Inc." }, { "names": [ "Li Qiang" ], "organization": "Qihoo 360 Gear Team" } ], "cve": "CVE-2017-7980", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2017-02-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1444371" } ], "notes": [ { "category": "description", "text": "An out-of-bounds r/w access issue was found in QEMU\u0027s Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data via various bitblt functions. A privileged user inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: display: cirrus: OOB r/w access issues in bitblt routines", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-7980" }, { "category": "external", "summary": "RHBZ#1444371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1444371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-7980", "url": "https://www.cve.org/CVERecord?id=CVE-2017-7980" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-7980", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7980" } ], "release_date": "2017-03-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-09T11:07:02+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1205" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "Qemu: display: cirrus: OOB r/w access issues in bitblt routines" } ] }
rhsa-2017_1206
Vulnerability from csaf_redhat
Published
2017-05-09 12:29
Modified
2024-11-05 20:00
Summary
Red Hat Security Advisory: qemu-kvm security update
Notes
Topic
An update for qemu-kvm is now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm package provides the user-space component for running virtual machines that use KVM.
Security Fix(es):
* A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. (CVE-2016-9603)
* An out-of-bounds r/w access issue was found in QEMU's Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data via various bitblt functions. A privileged user inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. (CVE-2017-7980)
* An out-of-bounds memory access issue was found in QEMU's VNC display driver support. The vulnerability could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user/process inside a guest could use this flaw to crash the QEMU process, resulting in a denial of service. (CVE-2017-2633)
* An out-of-bounds access issue was found in QEMU's Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data using bitblt functions (for example, cirrus_bitblt_rop_fwd_transp_). A privileged user inside a guest could use this flaw to crash the QEMU process, resulting in denial of service. (CVE-2017-7718)
Red Hat would like to thank Jiangxin (PSIRT Huawei Inc.) and Li Qiang (Qihoo 360 Gear Team) for reporting CVE-2017-7980 and Jiangxin (PSIRT Huawei Inc.) for reporting CVE-2017-7718.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for qemu-kvm is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm package provides the user-space component for running virtual machines that use KVM.\n\nSecurity Fix(es):\n\n* A heap buffer overflow flaw was found in QEMU\u0027s Cirrus CLGD 54xx VGA emulator\u0027s VNC display driver support; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. (CVE-2016-9603)\n\n* An out-of-bounds r/w access issue was found in QEMU\u0027s Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data via various bitblt functions. A privileged user inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. (CVE-2017-7980)\n\n* An out-of-bounds memory access issue was found in QEMU\u0027s VNC display driver support. The vulnerability could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user/process inside a guest could use this flaw to crash the QEMU process, resulting in a denial of service. (CVE-2017-2633)\n\n* An out-of-bounds access issue was found in QEMU\u0027s Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data using bitblt functions (for example, cirrus_bitblt_rop_fwd_transp_). A privileged user inside a guest could use this flaw to crash the QEMU process, resulting in denial of service. (CVE-2017-7718)\n\nRed Hat would like to thank Jiangxin (PSIRT Huawei Inc.) and Li Qiang (Qihoo 360 Gear Team) for reporting CVE-2017-7980 and Jiangxin (PSIRT Huawei Inc.) for reporting CVE-2017-7718.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:1206", "url": "https://access.redhat.com/errata/RHSA-2017:1206" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1400438", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400438" }, { "category": "external", "summary": "1425939", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1425939" }, { "category": "external", "summary": "1430056", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430056" }, { "category": "external", "summary": "1437060", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1437060" }, { "category": "external", "summary": "1443441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443441" }, { "category": "external", "summary": "1444371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1444371" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1206.json" } ], "title": "Red Hat Security Advisory: qemu-kvm security update", "tracking": { "current_release_date": "2024-11-05T20:00:55+00:00", "generator": { "date": "2024-11-05T20:00:55+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2017:1206", "initial_release_date": "2017-05-09T12:29:49+00:00", "revision_history": [ { "date": "2017-05-09T12:29:49+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-05-09T12:29:49+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:00:55+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node (v. 6)", "product": { "name": "Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-guest-agent@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-tools@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "product": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "product_id": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-guest-agent@0.12.1.2-2.503.el6_9.3?arch=i686\u0026epoch=2" } } }, { "category": "product_version", "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "product": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "product_id": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@0.12.1.2-2.503.el6_9.3?arch=i686\u0026epoch=2" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "product": { "name": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "product_id": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm@0.12.1.2-2.503.el6_9.3?arch=src\u0026epoch=2" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "product": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "product_id": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-guest-agent@0.12.1.2-2.503.el6_9.3?arch=ppc64\u0026epoch=2" } } }, { "category": "product_version", "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "product": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "product_id": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@0.12.1.2-2.503.el6_9.3?arch=ppc64\u0026epoch=2" } } } ], "category": "architecture", "name": "ppc64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686" }, "product_reference": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64" }, "product_reference": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src" }, "product_reference": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686" }, "product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64" }, "product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", "product_id": "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Client-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686" }, "product_reference": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "relates_to_product_reference": "6ComputeNode-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64" }, "product_reference": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "relates_to_product_reference": "6ComputeNode-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6ComputeNode-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6ComputeNode-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src" }, "product_reference": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "relates_to_product_reference": "6ComputeNode-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6ComputeNode-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686" }, "product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "relates_to_product_reference": "6ComputeNode-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64" }, "product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "relates_to_product_reference": "6ComputeNode-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6ComputeNode-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)", "product_id": "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6ComputeNode-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686" }, "product_reference": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64" }, "product_reference": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src" }, "product_reference": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686" }, "product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64" }, "product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", "product_id": "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686" }, "product_reference": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64" }, "product_reference": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src" }, "product_reference": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686" }, "product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64" }, "product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Workstation-6.9.z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", "product_id": "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Workstation-6.9.z" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9603", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2016-11-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1430056" } ], "notes": [ { "category": "description", "text": "A heap buffer overflow flaw was found in QEMU\u0027s Cirrus CLGD 54xx VGA emulator\u0027s VNC display driver support; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: cirrus: heap buffer overflow via vnc connection", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9603" }, { "category": "external", "summary": "RHBZ#1430056", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430056" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9603", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9603" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9603", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9603" } ], "release_date": "2017-03-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-09T12:29:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1206" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "Qemu: cirrus: heap buffer overflow via vnc connection" }, { "cve": "CVE-2017-2633", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "discovery_date": "2016-12-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1425939" } ], "notes": [ { "category": "description", "text": "An out-of-bounds memory access issue was found in Quick Emulator (QEMU) in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: VNC: memory corruption due to unchecked resolution limit", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-2633" }, { "category": "external", "summary": "RHBZ#1425939", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1425939" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-2633", "url": "https://www.cve.org/CVERecord?id=CVE-2017-2633" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2633", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2633" } ], "release_date": "2016-12-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-09T12:29:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1206" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 3.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:S/C:N/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "version": "3.0" }, "products": [ "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Qemu: VNC: memory corruption due to unchecked resolution limit" }, { "acknowledgments": [ { "names": [ "Jiangxin" ], "organization": "PSIRT Huawei Inc." } ], "cve": "CVE-2017-7718", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-03-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443441" } ], "notes": [ { "category": "description", "text": "An out-of-bounds access issue was found in QEMU\u0027s Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data using bitblt functions (for example, cirrus_bitblt_rop_fwd_transp_). A privileged user inside a guest could use this flaw to crash the QEMU process, resulting in denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: display: cirrus: OOB read access issue", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-7718" }, { "category": "external", "summary": "RHBZ#1443441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443441" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-7718", "url": "https://www.cve.org/CVERecord?id=CVE-2017-7718" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-7718", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7718" } ], "release_date": "2017-03-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-09T12:29:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1206" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 2.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:A/AC:H/Au:S/C:P/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L", "version": "3.0" }, "products": [ "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Qemu: display: cirrus: OOB read access issue" }, { "acknowledgments": [ { "names": [ "Jiangxin" ], "organization": "PSIRT Huawei Inc." }, { "names": [ "Li Qiang" ], "organization": "Qihoo 360 Gear Team" } ], "cve": "CVE-2017-7980", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2017-02-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1444371" } ], "notes": [ { "category": "description", "text": "An out-of-bounds r/w access issue was found in QEMU\u0027s Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data via various bitblt functions. A privileged user inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: display: cirrus: OOB r/w access issues in bitblt routines", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-7980" }, { "category": "external", "summary": "RHBZ#1444371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1444371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-7980", "url": "https://www.cve.org/CVERecord?id=CVE-2017-7980" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-7980", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7980" } ], "release_date": "2017-03-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-05-09T12:29:49+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1206" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Client-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Client-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Client-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6ComputeNode-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6ComputeNode-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6ComputeNode-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Server-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Server-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-guest-agent-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-img-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.src", "6Workstation-6.9.z:qemu-kvm-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.i686", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.ppc64", "6Workstation-6.9.z:qemu-kvm-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Workstation-6.9.z:qemu-kvm-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "Qemu: display: cirrus: OOB r/w access issues in bitblt routines" } ] }
rhsa-2017_1441
Vulnerability from csaf_redhat
Published
2017-06-14 15:20
Modified
2024-11-05 20:03
Summary
Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update
Notes
Topic
An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.
Security Fix(es):
* A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. (CVE-2016-9603)
* An out-of-bounds r/w access issue was found in QEMU's Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data via various bitblt functions. A privileged user inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. (CVE-2017-7980)
* An out-of-bounds memory access issue was found in QEMU's VNC display driver support. The vulnerability could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user/process inside a guest could use this flaw to crash the QEMU process, resulting in a denial of service. (CVE-2017-2633)
* An out-of-bounds access issue was found in QEMU's Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data using bitblt functions (for example, cirrus_bitblt_rop_fwd_transp_). A privileged user inside a guest could use this flaw to crash the QEMU process, resulting in denial of service. (CVE-2017-7718)
Red Hat would like to thank Jiangxin (PSIRT Huawei Inc.) and Li Qiang (Qihoo 360 Gear Team) for reporting CVE-2017-7980 and Jiangxin (PSIRT Huawei Inc.) for reporting CVE-2017-7718.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.\n\nSecurity Fix(es):\n\n* A heap buffer overflow flaw was found in QEMU\u0027s Cirrus CLGD 54xx VGA emulator\u0027s VNC display driver support; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. (CVE-2016-9603)\n\n* An out-of-bounds r/w access issue was found in QEMU\u0027s Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data via various bitblt functions. A privileged user inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. (CVE-2017-7980)\n\n* An out-of-bounds memory access issue was found in QEMU\u0027s VNC display driver support. The vulnerability could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user/process inside a guest could use this flaw to crash the QEMU process, resulting in a denial of service. (CVE-2017-2633)\n\n* An out-of-bounds access issue was found in QEMU\u0027s Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data using bitblt functions (for example, cirrus_bitblt_rop_fwd_transp_). A privileged user inside a guest could use this flaw to crash the QEMU process, resulting in denial of service. (CVE-2017-7718)\n\nRed Hat would like to thank Jiangxin (PSIRT Huawei Inc.) and Li Qiang (Qihoo 360 Gear Team) for reporting CVE-2017-7980 and Jiangxin (PSIRT Huawei Inc.) for reporting CVE-2017-7718.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:1441", "url": "https://access.redhat.com/errata/RHSA-2017:1441" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1425939", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1425939" }, { "category": "external", "summary": "1430056", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430056" }, { "category": "external", "summary": "1442810", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1442810" }, { "category": "external", "summary": "1443441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443441" }, { "category": "external", "summary": "1444371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1444371" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1441.json" } ], "title": "Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update", "tracking": { "current_release_date": "2024-11-05T20:03:05+00:00", "generator": { "date": "2024-11-05T20:03:05+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2017:1441", "initial_release_date": "2017-06-14T15:20:20+00:00", "revision_history": [ { "date": "2017-06-14T15:20:20+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-06-14T15:20:20+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:03:05+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6", "product": { "name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6", "product_id": "6Server-RH6-RHOS-5.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:5::el6" } } } ], "category": "product_family", "name": "Red Hat OpenStack Platform" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img-rhev@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev-tools@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "product": { "name": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_id": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev-debuginfo@0.12.1.2-2.503.el6_9.3?arch=x86_64\u0026epoch=2" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "product": { "name": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "product_id": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev@0.12.1.2-2.503.el6_9.3?arch=src\u0026epoch=2" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6", "product_id": "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-RH6-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6", "product_id": "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src" }, "product_reference": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "relates_to_product_reference": "6Server-RH6-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6", "product_id": "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-RH6-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6", "product_id": "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-RH6-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6", "product_id": "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" }, "product_reference": "qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64", "relates_to_product_reference": "6Server-RH6-RHOS-5.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-9603", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2016-11-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1430056" } ], "notes": [ { "category": "description", "text": "A heap buffer overflow flaw was found in QEMU\u0027s Cirrus CLGD 54xx VGA emulator\u0027s VNC display driver support; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: cirrus: heap buffer overflow via vnc connection", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2016-9603" }, { "category": "external", "summary": "RHBZ#1430056", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430056" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2016-9603", "url": "https://www.cve.org/CVERecord?id=CVE-2016-9603" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-9603", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-9603" } ], "release_date": "2017-03-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-06-14T15:20:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1441" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "Qemu: cirrus: heap buffer overflow via vnc connection" }, { "cve": "CVE-2017-2633", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "discovery_date": "2016-12-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1425939" } ], "notes": [ { "category": "description", "text": "An out-of-bounds memory access issue was found in Quick Emulator (QEMU) in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: VNC: memory corruption due to unchecked resolution limit", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-2633" }, { "category": "external", "summary": "RHBZ#1425939", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1425939" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-2633", "url": "https://www.cve.org/CVERecord?id=CVE-2017-2633" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-2633", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2633" } ], "release_date": "2016-12-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-06-14T15:20:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1441" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 3.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:S/C:N/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "version": "3.0" }, "products": [ "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Qemu: VNC: memory corruption due to unchecked resolution limit" }, { "acknowledgments": [ { "names": [ "Jiangxin" ], "organization": "PSIRT Huawei Inc." } ], "cve": "CVE-2017-7718", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2017-03-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1443441" } ], "notes": [ { "category": "description", "text": "An out-of-bounds access issue was found in QEMU\u0027s Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data using bitblt functions (for example, cirrus_bitblt_rop_fwd_transp_). A privileged user inside a guest could use this flaw to crash the QEMU process, resulting in denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: display: cirrus: OOB read access issue", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-7718" }, { "category": "external", "summary": "RHBZ#1443441", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443441" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-7718", "url": "https://www.cve.org/CVERecord?id=CVE-2017-7718" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-7718", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7718" } ], "release_date": "2017-03-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-06-14T15:20:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1441" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 2.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:A/AC:H/Au:S/C:P/I:N/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L", "version": "3.0" }, "products": [ "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Qemu: display: cirrus: OOB read access issue" }, { "acknowledgments": [ { "names": [ "Jiangxin" ], "organization": "PSIRT Huawei Inc." }, { "names": [ "Li Qiang" ], "organization": "Qihoo 360 Gear Team" } ], "cve": "CVE-2017-7980", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2017-02-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1444371" } ], "notes": [ { "category": "description", "text": "An out-of-bounds r/w access issue was found in QEMU\u0027s Cirrus CLGD 54xx VGA Emulator support. The vulnerability could occur while copying VGA data via various bitblt functions. A privileged user inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "Qemu: display: cirrus: OOB r/w access issues in bitblt routines", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-7980" }, { "category": "external", "summary": "RHBZ#1444371", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1444371" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-7980", "url": "https://www.cve.org/CVERecord?id=CVE-2017-7980" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-7980", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7980" } ], "release_date": "2017-03-15T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-06-14T15:20:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.", "product_ids": [ "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1441" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.0" }, "products": [ "6Server-RH6-RHOS-5.0:qemu-img-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.src", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.503.el6_9.3.x86_64", "6Server-RH6-RHOS-5.0:qemu-kvm-rhev-tools-2:0.12.1.2-2.503.el6_9.3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "Qemu: display: cirrus: OOB r/w access issues in bitblt routines" } ] }
gsd-2017-2633
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2017-2633", "description": "An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process.", "id": "GSD-2017-2633", "references": [ "https://www.suse.com/security/cve/CVE-2017-2633.html", "https://access.redhat.com/errata/RHSA-2017:1856", "https://access.redhat.com/errata/RHSA-2017:1441", "https://access.redhat.com/errata/RHSA-2017:1206", "https://access.redhat.com/errata/RHSA-2017:1205", "https://ubuntu.com/security/CVE-2017-2633", "https://linux.oracle.com/cve/CVE-2017-2633.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2017-2633" ], "details": "An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process.", "id": "GSD-2017-2633", "modified": "2023-12-13T01:21:05.486951Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2017-2633", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Qemu:", "version": { "version_data": [ { "version_value": "1.7.2" } ] } } ] }, "vendor_name": "QEMU" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process." } ] }, "impact": { "cvss": [ [ { "vectorString": "5.4/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "version": "3.0" } ], [ { "vectorString": "3.8/AV:A/AC:M/Au:S/C:N/I:P/A:P", "version": "2.0" } ] ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-120" } ] } ] }, "references": { "reference_data": [ { "name": "[oss-security] 20170223 CVE-2017-2633 Qemu: VNC: memory corruption due to unchecked resolution limit", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2017/02/23/1" }, { "name": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=bea60dd7679364493a0d7f5b54316c767cf894ef", "refsource": "CONFIRM", "url": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=bea60dd7679364493a0d7f5b54316c767cf894ef" }, { "name": "RHSA-2017:1206", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1206" }, { "name": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=9f64916da20eea67121d544698676295bbb105a7", "refsource": "CONFIRM", "url": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=9f64916da20eea67121d544698676295bbb105a7" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633" }, { "name": "RHSA-2017:1441", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1441" }, { "name": "96417", "refsource": "BID", "url": "http://www.securityfocus.com/bid/96417" }, { "name": "RHSA-2017:1856", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1856" }, { "name": "RHSA-2017:1205", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1205" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "1.7.2", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2017-2633" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-125" }, { "lang": "en", "value": "CWE-787" } ] } ] }, "references": { "reference_data": [ { "name": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=bea60dd7679364493a0d7f5b54316c767cf894ef", "refsource": "CONFIRM", "tags": [ "Patch", "Vendor Advisory" ], "url": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=bea60dd7679364493a0d7f5b54316c767cf894ef" }, { "name": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=9f64916da20eea67121d544698676295bbb105a7", "refsource": "CONFIRM", "tags": [ "Patch", "Vendor Advisory" ], "url": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=9f64916da20eea67121d544698676295bbb105a7" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633", "refsource": "CONFIRM", "tags": [ "Issue Tracking", "Patch", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633" }, { "name": "[oss-security] 20170223 CVE-2017-2633 Qemu: VNC: memory corruption due to unchecked resolution limit", "refsource": "MLIST", "tags": [ "Mailing List", "Patch", "Third Party Advisory" ], "url": "http://www.openwall.com/lists/oss-security/2017/02/23/1" }, { "name": "RHSA-2017:1856", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:1856" }, { "name": "RHSA-2017:1441", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:1441" }, { "name": "RHSA-2017:1206", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:1206" }, { "name": "RHSA-2017:1205", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:1205" }, { "name": "96417", "refsource": "BID", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/96417" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "exploitabilityScore": 2.8, "impactScore": 3.6 } }, "lastModifiedDate": "2019-10-09T23:26Z", "publishedDate": "2018-07-27T19:29Z" } } }
ghsa-c46f-47cq-c2fg
Vulnerability from github
Published
2022-05-13 01:36
Modified
2022-05-13 01:36
Severity ?
Details
An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
{ "affected": [], "aliases": [ "CVE-2017-2633" ], "database_specific": { "cwe_ids": [ "CWE-125" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2018-07-27T19:29:00Z", "severity": "MODERATE" }, "details": "An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the \u0027vnc_refresh_server_surface\u0027. A user inside a guest could use this flaw to crash the QEMU process.", "id": "GHSA-c46f-47cq-c2fg", "modified": "2022-05-13T01:36:52Z", "published": "2022-05-13T01:36:52Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-2633" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:1205" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:1206" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:1441" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:1856" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633" }, { "type": "WEB", "url": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=9f64916da20eea67121d544698676295bbb105a7" }, { "type": "WEB", "url": "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=bea60dd7679364493a0d7f5b54316c767cf894ef" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2017/02/23/1" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/96417" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" } ] }
Loading...
Loading...
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.