RHSA-2019:1175HighCVSS 7.5

Red Hat Security Advisory: virt:rhel security update

Published
May 14, 2019
Last Modified
October 14, 2026

🔗 CVE IDs covered (9)

CVE-2019-3855 →CVE-2019-3856 →CVE-2019-3863 →CVE-2018-12126 →CVE-2018-12127 →CVE-2018-12130 →CVE-2018-20815 →CVE-2019-3857 →CVE-2019-11091 →

📋 Description

CVE-2018-12126 — hardware: Microarchitectural Store Buffer Data Sampling (MSBDS) CVE-2018-12127 — hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS) CVE-2018-12130 — hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) CVE-2018-20815 — QEMU: device_tree: heap buffer overflow while loading device tree blob CVE-2019-3855 — libssh2: Integer overflow in transport read resulting in out of bounds write CVE-2019-3856 — libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write CVE-2019-3857 — libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write CVE-2019-3863 — libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes CVE-2019-11091 — hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

🎯 Affected products200

  • Red Hat Enterprise Linux AppStream (v. 8)
  • SLOF-0:20171214-5.gitfa98132.module+el8.0.0+3075+09be6b65.noarch (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • SLOF-0:20171214-5.gitfa98132.module+el8.0.0+3075+09be6b65.src (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.src (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-debuginfo-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-debugsource-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-debugsource-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-debugsource-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-debugsource-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-devel-0:1.3.15-6.module+el8.0.0+3075+09be6b65.aarch64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-devel-0:1.3.15-6.module+el8.0.0+3075+09be6b65.ppc64le (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-devel-0:1.3.15-6.module+el8.0.0+3075+09be6b65.s390x (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • hivex-devel-0:1.3.15-6.module+el8.0.0+3075+09be6b65.x86_64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.ppc64le (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.s390x (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.src (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libguestfs-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libguestfs-bash-completion-1:1.38.4-10.module+el8.0.0+3075+09be6b65.noarch (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libguestfs-benchmarking-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libguestfs-benchmarking-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libguestfs-benchmarking-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.aarch64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • libguestfs-benchmarking-debuginfo-1:1.38.4-10.module+el8.0.0+3075+09be6b65.x86_64 (virt:rhel) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (12)