Red Hat Security AdvisoryRHSA-2011:0919
qemu-kvm security and bug fix update
Released 2011-07-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) qemu-img-2:0.12.1.2-2.160.el6_1.2, qemu-kvm-2:0.12.1.2-2.160.el6_1.2, qemu-kvm-tools-2:0.12.1.2-2.160.el6_1.2
Fixes 2 records
Priority LOW 34
Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to "virtqueue i…
CVSS 2.0HIGH 7.4· Adjacent network · Low privileges · Interaction — · EPSS 0.007 · Published 2012-06-21 · Fixed CWE-119
Priority LOW 30
The virtio_queue_notify in qemu-kvm 0.14.0 and earlier does not properly validate the virtqueue number, which allows guest users to cause a denial of service (guest crash) and possibly execute arbitrary code via a negati…
CVSS 2.0MEDIUM 5.8· Adjacent network · No auth · Interaction — · EPSS 0.01882 · Published 2012-06-21 · Fixed CWE-20
