Red Hat Security AdvisoryRHSA-2011:1401
xen security and bug fix update
Released 2011-10-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Multi OS (v. 5 client) xen-3.0.3-132.el5_7.2, xen-3.0.3-132.el5_7.2.i386, xen-devel-3.0.3-132.el5_7.2 +1
- RHEL Virtualization (v. 5 server) xen-3.0.3-132.el5_7.2, xen-3.0.3-132.el5_7.2.i386, xen-3.0.3-132.el5_7.2.ia64 +3
- Red Hat Enterprise Linux (v. 5 server) xen-3.0.3-132.el5_7.2, xen-libs-3.0.3-132.el5_7.2, xen-libs-3.0.3-132.el5_7.2.i386 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) xen-3.0.3-132.el5_7.2, xen-libs-3.0.3-132.el5_7.2, xen-libs-3.0.3-132.el5_7.2.i386
Fixes 1 record
Priority LOW 19
Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted S…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00487 · Published 2014-04-01 · Fixed CWE-119
