Red Hat Security AdvisoryRHSA-2011:0534
qemu-kvm security, bug fix, and enhancement update
Released 2011-05-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-img-2:0.12.1.2-2.160.el6, qemu-kvm-2:0.12.1.2-2.160.el6, qemu-kvm-tools-2:0.12.1.2-2.160.el6
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-img-2:0.12.1.2-2.160.el6, qemu-kvm-2:0.12.1.2-2.160.el6, qemu-kvm-tools-2:0.12.1.2-2.160.el6
- Red Hat Enterprise Linux Server (v. 6) qemu-img-2:0.12.1.2-2.160.el6, qemu-kvm-2:0.12.1.2-2.160.el6, qemu-kvm-tools-2:0.12.1.2-2.160.el6
- Red Hat Enterprise Linux Workstation (v. 6) qemu-img-2:0.12.1.2-2.160.el6, qemu-kvm-2:0.12.1.2-2.160.el6, qemu-kvm-tools-2:0.12.1.2-2.160.el6
Fixes 2 records
Priority LOW 34
The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to caus…
CVSS 2.0HIGH 7.4· Adjacent network · Low privileges · Interaction — · EPSS 0.00741 · Published 2012-06-21 · Fixed CWE-20
Priority LOW 34
Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request t…
CVSS 2.0HIGH 7.4· Adjacent network · Low privileges · Interaction — · EPSS 0.00709 · Published 2012-06-21 · Fixed CWE-119
