RHSA-2017:2392HighCVSS 5.5

Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update

Published
August 1, 2017
Last Modified
June 30, 2026

🔗 CVE IDs covered (22)

CVE-2016-4020 →CVE-2016-7422 →CVE-2016-9922 →CVE-2017-5973 →CVE-2017-9310 →CVE-2016-8910 →CVE-2016-9911 →CVE-2017-9373 →CVE-2017-9374 →CVE-2016-6835 →CVE-2016-6888 →CVE-2016-7466 →CVE-2016-8669 →CVE-2016-8909 →CVE-2016-9907 →CVE-2017-5579 →CVE-2017-5898 →CVE-2016-8576 →CVE-2016-9921 →CVE-2016-10155 →CVE-2017-2630 →CVE-2017-9375 →

📋 Description

CVE-2016-4020 — Qemu: i386: leakage of stack memory to guest in kvmvapic.c CVE-2016-6835 — Qemu: net: vmxnet: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation CVE-2016-6888 — Qemu: net: vmxnet: integer overflow in packet initialisation CVE-2016-7422 — Qemu: virtio: null pointer dereference in virtqueu_map_desc CVE-2016-7466 — Qemu: usb: xhci memory leakage during device unplug CVE-2016-8576 — Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch CVE-2016-8669 — Qemu: char: divide by zero error in serial_update_parameters CVE-2016-8909 — Qemu: audio: intel-hda: infinite loop in processing dma buffer stream CVE-2016-8910 — Qemu: net: rtl8139: infinite loop while transmit in C+ mode CVE-2016-9907 — Qemu: usb: redirector: memory leakage when destroying redirector CVE-2016-9911 — Qemu: usb: ehci: memory leakage in ehci_init_transfer CVE-2016-9921 — Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy CVE-2016-9922 — Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy CVE-2016-10155 — Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb CVE-2017-2630 — Qemu: nbd: oob stack write in client routine drop_sync CVE-2017-5579 — Qemu: serial: host memory leakage 16550A UART emulation CVE-2017-5898 — Qemu: usb: integer overflow in emulated_apdu_from_guest CVE-2017-5973 — Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx CVE-2017-9310 — Qemu: net: infinite loop in e1000e NIC emulation CVE-2017-9373 — Qemu: ide: ahci host memory leakage during hotunplug CVE-2017-9374 — Qemu: usb: ehci host memory leakage during hotunplug CVE-2017-9375 — Qemu: usb: xhci infinite recursive call via xhci_kick_ep

🔗 References (229)