Red Hat Security AdvisoryRHSA-2010:0271
kvm security, bug fix and enhancement update
Released 2010-03-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) kmod-kvm-83-164.el5, kvm-83-164.el5, kvm-qemu-img-83-164.el5 +1
- Red Hat Enterprise Linux Virtualization (v. 5 server) kmod-kvm-83-164.el5, kvm-83-164.el5, kvm-qemu-img-83-164.el5 +1
Fixes 2 records
Priority MEDIUM 40
The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03518 · Published 2010-04-12 · Fixed CWE-20
Priority LOW 33
libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memo…
CVSS 2.0HIGH 7.4· Adjacent network · Low privileges · Interaction — · EPSS 0.0054 · Published 2013-12-27 · Fixed CWE-119
