qemu security update

2018-10-2900:00:00

linux.oracle.com

462

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:C/I:C/A:C

0.141 Low

EPSS

Percentile

95.2%

JSON

[12:2.9.0-17.el7]

i386: Remove generic SMT thread check (Babu Moger) [Orabug: 28676425]
pc: Fix typo on PC_COMPAT_2_12 (Eduardo Habkost) [Orabug: 28676425]
i386: Enable TOPOEXT feature on AMD EPYC CPU (Babu Moger) [Orabug: 28676425]
net: ignore packet size greater than INT_MAX (Jason Wang) [Orabug: 28762625] {CVE-2018-17963}
pcnet: fix possible buffer overflow (Jason Wang) [Orabug: 28762617] {CVE-2018-17962}
rtl8139: fix possible out of bound access (Jason Wang) [Orabug: 28762613] {CVE-2018-17958}
ne2000: fix possible out of bound access in ne2000_receive (Jason Wang) [Orabug: 28733338] {CVE-2018-10839}
seccomp: set the seccomp filter to all threads (Marc-Andre Lureau) [Orabug: 28576303] {CVE-2018-15746}
virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit to virtio_net (Venu Busireddy) [Orabug: 28497003]
virtio-net: use 64-bit values for feature flags (Jason Baron) [Orabug: 28497003]
qga: check bytes count read by guest-file-read (Prasad J Pandit) [Orabug: 28312939] {CVE-2018-12617}
CVE-2017-2630: Qemu: nbd: oob stack write in client routine drop_sync (Mark Kanda) [Orabug: 28424694] {CVE-2017-2630}
CVE-2017-2633: Qemu: VNC: memory corruption due to unchecked resolution limit (Mark Kanda) [Orabug: 28424697] {CVE-2017-2633}
CVE-2017-7471: Qemu: 9p: virtfs allows guest to change filesystem attributes (Mark Kanda) [Orabug: 28407849] {CVE-2017-7471}
slirp: correct size computation while concatenating mbuf (Prasad J Pandit) [Orabug: 28263244] {CVE-2018-11806}

OSVersionArchitecturePackageVersionFilename
oracle linux7srcqemu< 2.9.0-17.el7qemu-2.9.0-17.el7.src.rpm
oracle linux7x86_64qemu< 2.9.0-17.el7qemu-2.9.0-17.el7.x86_64.rpm
oracle linux7x86_64qemu-block-gluster< 2.9.0-17.el7qemu-block-gluster-2.9.0-17.el7.x86_64.rpm
oracle linux7x86_64qemu-block-iscsi< 2.9.0-17.el7qemu-block-iscsi-2.9.0-17.el7.x86_64.rpm
oracle linux7x86_64qemu-block-rbd< 2.9.0-17.el7qemu-block-rbd-2.9.0-17.el7.x86_64.rpm
oracle linux7x86_64qemu-common< 2.9.0-17.el7qemu-common-2.9.0-17.el7.x86_64.rpm
oracle linux7x86_64qemu-img< 2.9.0-17.el7qemu-img-2.9.0-17.el7.x86_64.rpm
oracle linux7x86_64qemu-kvm< 2.9.0-17.el7qemu-kvm-2.9.0-17.el7.x86_64.rpm
oracle linux7x86_64qemu-kvm-core< 2.9.0-17.el7qemu-kvm-core-2.9.0-17.el7.x86_64.rpm
oracle linux7x86_64qemu-system-x86< 2.9.0-17.el7qemu-system-x86-2.9.0-17.el7.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	7	src	qemu	< 2.9.0-17.el7	qemu-2.9.0-17.el7.src.rpm
oracle linux	7	x86_64	qemu	< 2.9.0-17.el7	qemu-2.9.0-17.el7.x86_64.rpm
oracle linux	7	x86_64	qemu-block-gluster	< 2.9.0-17.el7	qemu-block-gluster-2.9.0-17.el7.x86_64.rpm
oracle linux	7	x86_64	qemu-block-iscsi	< 2.9.0-17.el7	qemu-block-iscsi-2.9.0-17.el7.x86_64.rpm
oracle linux	7	x86_64	qemu-block-rbd	< 2.9.0-17.el7	qemu-block-rbd-2.9.0-17.el7.x86_64.rpm
oracle linux	7	x86_64	qemu-common	< 2.9.0-17.el7	qemu-common-2.9.0-17.el7.x86_64.rpm
oracle linux	7	x86_64	qemu-img	< 2.9.0-17.el7	qemu-img-2.9.0-17.el7.x86_64.rpm
oracle linux	7	x86_64	qemu-kvm	< 2.9.0-17.el7	qemu-kvm-2.9.0-17.el7.x86_64.rpm
oracle linux	7	x86_64	qemu-kvm-core	< 2.9.0-17.el7	qemu-kvm-core-2.9.0-17.el7.x86_64.rpm
oracle linux	7	x86_64	qemu-system-x86	< 2.9.0-17.el7	qemu-system-x86-2.9.0-17.el7.x86_64.rpm