Quick emulator(Qemu) built with the VGA display emulator support is vulnerable to an assert failure issue. It could occur while updating graphics display, due to miscalculating region for dirty bitmap snapshot in split screen mode. A privileged user/process inside guest could use this flaw to crash the Qemu process on the host resulting in DoS. Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg05333.html Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/08/30/4
Acknowledgments: Name: David Buchanan
Created xen tracking bugs for this issue: Affects: fedora-all [bug 1486591]
Created qemu tracking bugs for this issue: Affects: fedora-all [bug 1486589]
Removing tracker and marking OSP6 as wontfix. RHEL 7.5 is released after OSP6 is EOL.
This issue has been addressed in the following products: Red Hat Virtualization 4 for RHEL-7 Via RHSA-2018:1104 https://access.redhat.com/errata/RHSA-2018:1104
This issue has been addressed in the following products: Red Hat OpenStack Platform 10.0 (Newton) Red Hat OpenStack Platform 11.0 (Ocata) Red Hat OpenStack Platform 8.0 (Liberty) Red Hat OpenStack Platform 9.0 (Mitaka) Red Hat OpenStack Platform 12.0 (Pike) Via RHSA-2018:1113 https://access.redhat.com/errata/RHSA-2018:1113