RHSA-2018:1104HighCVSS 8.3

Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update

Published
April 10, 2018
Last Modified
June 30, 2026

🔗 CVE IDs covered (8)

CVE-2017-15118 →CVE-2017-15119 →CVE-2017-15124 →CVE-2017-15268 →CVE-2018-5683 →CVE-2017-13672 →CVE-2017-13673 →CVE-2017-13711 →

📋 Description

CVE-2017-13672 — QEMU: vga: OOB read access during display update CVE-2017-13673 — QEMU: VGA: reachable assert failure during display update CVE-2017-13711 — QEMU: Slirp: use-after-free when sending response CVE-2017-15118 — Qemu: stack buffer overflow in NBD server triggered via long export name CVE-2017-15119 — qemu: DoS via large option request CVE-2017-15124 — Qemu: memory exhaustion through framebuffer update request message in VNC server CVE-2017-15268 — QEMU: I/O: potential memory exhaustion via websock connection to VNC CVE-2018-5683 — Qemu: Out-of-bounds read in vga_draw_text routine

🔗 References (128)