Red Hat Security Advisory

RHSA-2010:0088

kvm security and bug fix update

Released 2010-02-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) kmod-kvm-83-105.el5_4.22, kvm-83-105.el5_4.22, kvm-qemu-img-83-105.el5_4.22 +1
Red Hat Enterprise Linux Virtualization (v. 5 server) kmod-kvm-83-105.el5_4.22, kvm-83-105.el5_4.22, kvm-qemu-img-83-105.el5_4.22 +1

Fixes 4 records

TI-2010-00296 CVE-2010-0309 · GHSA-wqgc-3hgm-hrw9

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in…

LOW 35

The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS c…

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.02771 Published 2010-02-12 Fixed CWE-16

TI-2010-00285 CVE-2010-0298 · GHSA-h7hj-hjcj-pwpj

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O…

LOW 33

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02416 Published 2010-02-12 Fixed CWE-264

TI-2010-00284 CVE-2010-0297 · GHSA-r7ff-53hm-m6vh

Buffer overflow in the usb_host_handle_control function in the USB passthrough handling…

LOW 32

Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or p…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00511 Published 2010-02-12 Fixed CWE-119

TI-2010-00293 CVE-2010-0306 · GHSA-xpcm-5q5j-h76x

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing…

LOW 19

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) to restrict instruction execution, which allows gu…

CVSS 2.0MEDIUM 4.1 Local Low privileges Interaction — EPSS 0.00378 Published 2010-02-12 Fixed CWE-264