Red Hat Security AdvisoryRHSA-2010:0633
qspice security update
Released 2010-08-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) qspice-0.3.0-54.el5_5.2, qspice-libs-0.3.0-54.el5_5.2, qspice-libs-devel-0.3.0-54.el5_5.2
- Red Hat Enterprise Linux Virtualization (v. 5 server) qspice-0.3.0-54.el5_5.2, qspice-libs-0.3.0-54.el5_5.2, qspice-libs-devel-0.3.0-54.el5_5.2
Fixes 2 records
Priority LOW 29
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are pe…
CVSS 2.0MEDIUM 6.6· Local · Low privileges · Interaction — · EPSS 0.00311 · Published 2010-08-24 · Fixed CWE-264
Priority LOW 29
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver pointers, which allows guest OS users to…
CVSS 2.0MEDIUM 6.6· Local · Low privileges · Interaction — · EPSS 0.00311 · Published 2010-08-24 · Fixed CWE-20
