SB2018051513 - Red Hat update for QEMU
Published: May 15, 2018
Security Bulletin ID
SB2018051513
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Adjecent network
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2018-7858)
The vulnerability allows an adjacent attacker to cause DoS condition on the target system.The weakness exists due to improper VGA display updates. An adjacent attacker can use incorrect region calculations during VGA display updates, trigger out-of-bounds read and cause the service to crash.
Remediation
Install update from vendor's website.