RHSA-2024:2135
Vulnerability Summary
Timeline
Description
Red Hat Security Advisory: qemu-kvm security update
CVSS Metrics
- v3.1•MEDIUM•Score: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Systems
- redhat•qemu-guest-agent
< 17:8.2.0-11.el9_4
- redhat•qemu-guest-agent-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-img
< 17:8.2.0-11.el9_4
- redhat•qemu-img-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-audio-dbus-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-audio-pa
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-audio-pa-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-block-blkio
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-block-blkio-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-block-curl
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-block-curl-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-block-rbd
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-block-rbd-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-common
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-common-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-core
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-core-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-debugsource
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-device-display-virtio-gpu
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-device-display-virtio-gpu-ccw
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-device-display-virtio-gpu-ccw-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-device-display-virtio-gpu-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-device-display-virtio-gpu-pci
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-device-display-virtio-gpu-pci-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-device-display-virtio-vga
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-device-display-virtio-vga-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-device-usb-host
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-device-usb-host-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-device-usb-redirect
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-device-usb-redirect-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-docs
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-tests-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-tools
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-tools-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-ui-dbus-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-ui-egl-headless
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-ui-egl-headless-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-ui-opengl
< 17:8.2.0-11.el9_4
- redhat•qemu-kvm-ui-opengl-debuginfo
< 17:8.2.0-11.el9_4
- redhat•qemu-pr-helper
< 17:8.2.0-11.el9_4
- redhat•qemu-pr-helper-debuginfo
< 17:8.2.0-11.el9_4
References (73)
- https://access.redhat.com/errata/RHSA-2024:2135
- https://access.redhat.com/security/updates/classification/#moderate
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index
- https://bugzilla.redhat.com/show_bug.cgi?id=2218486
- https://bugzilla.redhat.com/show_bug.cgi?id=2222351
- https://bugzilla.redhat.com/show_bug.cgi?id=2238291
- https://bugzilla.redhat.com/show_bug.cgi?id=2247283
- https://bugzilla.redhat.com/show_bug.cgi?id=2254825
- https://issues.redhat.com/browse/RHEL-11219
- https://issues.redhat.com/browse/RHEL-12991
- https://issues.redhat.com/browse/RHEL-14111
- https://issues.redhat.com/browse/RHEL-15394
- https://issues.redhat.com/browse/RHEL-15965
- https://issues.redhat.com/browse/RHEL-16581
- https://issues.redhat.com/browse/RHEL-16686
- https://issues.redhat.com/browse/RHEL-1676
- https://issues.redhat.com/browse/RHEL-17067
- https://issues.redhat.com/browse/RHEL-17068
- https://issues.redhat.com/browse/RHEL-1708
- https://issues.redhat.com/browse/RHEL-17168
- https://issues.redhat.com/browse/RHEL-17209
- https://issues.redhat.com/browse/RHEL-17369
- https://issues.redhat.com/browse/RHEL-1761
- https://issues.redhat.com/browse/RHEL-18212
- https://issues.redhat.com/browse/RHEL-19010
- https://issues.redhat.com/browse/RHEL-19117
- https://issues.redhat.com/browse/RHEL-19119
- https://issues.redhat.com/browse/RHEL-19738
- https://issues.redhat.com/browse/RHEL-20764
- https://issues.redhat.com/browse/RHEL-21057
- https://issues.redhat.com/browse/RHEL-21293
- https://issues.redhat.com/browse/RHEL-21570
- https://issues.redhat.com/browse/RHEL-21705
- https://issues.redhat.com/browse/RHEL-24045
- https://issues.redhat.com/browse/RHEL-24593
- https://issues.redhat.com/browse/RHEL-24614
- https://issues.redhat.com/browse/RHEL-24988
- https://issues.redhat.com/browse/RHEL-26049
- https://issues.redhat.com/browse/RHEL-3922
- https://issues.redhat.com/browse/RHEL-3934
- https://issues.redhat.com/browse/RHEL-5324
- https://issues.redhat.com/browse/RHEL-6101
- https://issues.redhat.com/browse/RHEL-7098
- https://issues.redhat.com/browse/RHEL-7115
- https://issues.redhat.com/browse/RHEL-7135
- https://issues.redhat.com/browse/RHEL-7356
- https://issues.redhat.com/browse/RHEL-7360
- https://issues.redhat.com/browse/RHEL-7361
- https://issues.redhat.com/browse/RHEL-7414
- https://issues.redhat.com/browse/RHEL-7478
- https://issues.redhat.com/browse/RHEL-7526
- https://issues.redhat.com/browse/RHEL-7527
- https://issues.redhat.com/browse/RHEL-7561
- https://issues.redhat.com/browse/RHEL-7565
- https://issues.redhat.com/browse/RHEL-832
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2135.json
- https://access.redhat.com/security/cve/CVE-2023-3019
- https://www.cve.org/CVERecord?id=CVE-2023-3019
- https://nvd.nist.gov/vuln/detail/CVE-2023-3019
- https://access.redhat.com/security/cve/CVE-2023-3255
- https://www.cve.org/CVERecord?id=CVE-2023-3255
- https://nvd.nist.gov/vuln/detail/CVE-2023-3255
- https://access.redhat.com/security/cve/CVE-2023-5088
- https://www.cve.org/CVERecord?id=CVE-2023-5088
- https://nvd.nist.gov/vuln/detail/CVE-2023-5088
- https://lore.kernel.org/all/20230921160712.99521-1-simon.rowe@nutanix.com/T/
- https://access.redhat.com/security/cve/CVE-2023-6683
- https://www.cve.org/CVERecord?id=CVE-2023-6683
- https://nvd.nist.gov/vuln/detail/CVE-2023-6683
- https://access.redhat.com/security/cve/CVE-2023-42467
- https://www.cve.org/CVERecord?id=CVE-2023-42467
- https://nvd.nist.gov/vuln/detail/CVE-2023-42467
- https://gitlab.com/qemu-project/qemu/-/issues/1813