Red Hat Security AdvisoryRHSA-2013:1553
qemu-kvm security, bug fix, and enhancement update
Released 2013-11-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.415.el6, qemu-img-2:0.12.1.2-2.415.el6, qemu-kvm-2:0.12.1.2-2.415.el6 +1
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.415.el6, qemu-img-2:0.12.1.2-2.415.el6, qemu-kvm-2:0.12.1.2-2.415.el6 +1
- Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.415.el6, qemu-img-2:0.12.1.2-2.415.el6, qemu-kvm-2:0.12.1.2-2.415.el6 +1
- Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.415.el6, qemu-img-2:0.12.1.2-2.415.el6, qemu-kvm-2:0.12.1.2-2.415.el6 +1
Fixes 1 record
Priority LOW 32
Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00434 · Published 2013-10-04 · Fixed CWE-120
