RHSA-2016:2705MediumCVSS 4.7

Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update

Published
November 14, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (3)

CVE-2015-8817 →CVE-2015-8818 →CVE-2016-2857 →

📋 Description

CVE-2015-8817 — Qemu: OOB access in address_space_rw leads to segmentation fault CVE-2015-8818 — Qemu: OOB access in address_space_rw leads to segmentation fault CVE-2016-2857 — Qemu: net: out of bounds read in net_checksum_calculate()

🎯 Affected products7

  • Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7
  • qemu-img-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7
  • qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7
  • qemu-kvm-rhev-10:2.6.0-27.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7
  • qemu-kvm-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7
  • qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7
  • qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

🔗 References (6)