Red Hat Security AdvisoryRHSA-2010:0627
kvm security and bug fix update
Released 2010-08-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) kmod-kvm-83-164.el5_5.21, kvm-83-164.el5_5.21, kvm-qemu-img-83-164.el5_5.21 +1
- Red Hat Enterprise Linux Virtualization (v. 5 server) kmod-kvm-83-164.el5_5.21, kvm-83-164.el5_5.21, kvm-qemu-img-83-164.el5_5.21 +1
Fixes 3 records
Priority LOW 29
The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not p…
CVSS 2.0MEDIUM 6.6· Local · Low privileges · Interaction — · EPSS 0.00278 · Published 2010-08-24 · Fixed CWE-264
Priority LOW 29
QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of…
CVSS 2.0MEDIUM 6.6· Local · Low privileges · Interaction — · EPSS 0.00314 · Published 2010-08-24 · Fixed CWE-20
Priority LOW 21
The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and…
CVSS 2.0MEDIUM 4.6· Local · Low privileges · Interaction — · EPSS 0.00359 · Published 2010-08-24 · Fixed