Lucene search

K
oraclelinuxOracleLinuxELSA-2018-2462
HistoryAug 16, 2018 - 12:00 a.m.

qemu-kvm security and bug fix update

2018-08-1600:00:00
linux.oracle.com
27

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

31.2%

[1.5.3-156.el7_5.5]

  • kvm-multiboot-bss_end_addr-can-be-zero.patch [bz#1549824]
  • kvm-multiboot-Remove-unused-variables-from-multiboot.c.patch [bz#1549824]
  • kvm-multiboot-Use-header-names-when-displaying-fields.patch [bz#1549824]
  • kvm-multiboot-fprintf-stderr.-error_report.patch [bz#1549824]
  • kvm-multiboot-Reject-kernels-exceeding-the-address-space.patch [bz#1549824]
  • kvm-multiboot-Check-validity-of-mh_header_addr.patch [bz#1549824]
  • kvm-slirp-remove-mbuf-m_hdr-m_dat-indirection.patch [bz#1586248]
  • kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586248]
  • Resolves: bz#1549824
    (CVE-2018-7550 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.5.z])
  • Resolves: bz#1586248
    (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.5.z])
    [1.5.3-156.el7_5.4]
  • kvm-target-i386-introduce-kvm_put_one_msr.patch [bz#1596302]
  • kvm-apic-fix-2.2-2.1-migration.patch [bz#1596302]
  • kvm-x86-lapic-Load-LAPIC-state-at-post_load.patch [bz#1596302]
  • kvm-apic-drop-debugging.patch [bz#1596302]
  • kvm-apic-set-APIC-base-as-part-of-kvm_apic_put.patch [bz#1596302]
  • Resolves: bz#1596302
    (Windows 2012 Guest hangs after live migration with RTC clock stopped. [rhel-7.5.z])

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

31.2%