{"id":"RHSA-2018:1104","summary":"Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update","modified":"2026-05-13T10:36:53.121210Z","published":"2024-09-13T13:41:00Z","upstream":["CVE-2017-13672","CVE-2017-13673","CVE-2017-13711","CVE-2017-15118","CVE-2017-15119","CVE-2017-15124","CVE-2017-15268","CVE-2018-5683"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:1104"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1139507"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1178472"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1212715"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1213786"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285044"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1305398"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1320114"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1344299"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1372583"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378241"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390346"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390348"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1398633"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406803"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414049"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1433670"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434321"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437113"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441460"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441684"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441938"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443877"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1445834"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446565"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447258"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447413"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448344"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449067"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449609"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449991"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451015"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451189"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451269"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1453167"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454362"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454367"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455074"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1457662"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459906"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459945"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1460119"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1460595"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1460848"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1462145"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1463172"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1464908"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1465799"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1468260"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1470634"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472756"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1474464"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1475634"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1476121"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1481593"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1482478"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1486400"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1486560"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1486588"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1489670"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1489800"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1491909"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1492178"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1492295"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495090"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495456"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1496879"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1497120"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1497137"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1497740"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498042"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498496"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498754"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498817"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1498865"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1499011"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1499647"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500181"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1500334"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501240"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501337"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501468"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502949"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1505654"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1505696"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1505701"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506151"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506531"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506882"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1507693"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1508271"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1508799"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1508886"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1510809"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511312"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1513870"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515173"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515393"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515604"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1516922"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1516925"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1517144"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518482"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518649"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1519721"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1520294"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1520824"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1523414"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1525195"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1525324"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1525868"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1526212"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1526423"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1528173"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1529053"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1529243"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1529676"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1530356"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534491"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535752"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535992"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538494"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1538953"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1540003"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1540182"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1542045"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1104.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2017-13672"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2017-13672"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13672"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2017-13673"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2017-13673"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13673"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2017-13711"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2017-13711"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13711"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2017-15118"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2017-15118"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15118"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2017-15119"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2017-15119"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15119"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2017-15124"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2017-15124"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15124"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2017-15268"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2017-15268"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15268"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2018-5683"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2018-5683"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5683"}],"affected":[{"package":{"name":"qemu-img-rhev","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","purl":"pkg:rpm/redhat/qemu-img-rhev"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.10.0-21.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:1104.json"}},{"package":{"name":"qemu-kvm-common-rhev","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","purl":"pkg:rpm/redhat/qemu-kvm-common-rhev"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.10.0-21.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:1104.json"}},{"package":{"name":"qemu-kvm-rhev","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","purl":"pkg:rpm/redhat/qemu-kvm-rhev"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.10.0-21.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:1104.json"}},{"package":{"name":"qemu-kvm-rhev-debuginfo","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","purl":"pkg:rpm/redhat/qemu-kvm-rhev-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.10.0-21.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:1104.json"}},{"package":{"name":"qemu-kvm-tools-rhev","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","purl":"pkg:rpm/redhat/qemu-kvm-tools-rhev"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.10.0-21.el7"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:1104.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L"}]}