Red Hat Security AdvisoryRHSA-2014:1075
qemu-kvm security and bug fix update
Released 2014-08-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.415.el6_5.14, qemu-img-2:0.12.1.2-2.415.el6_5.14, qemu-kvm-2:0.12.1.2-2.415.el6_5.14 +1
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.415.el6_5.14, qemu-img-2:0.12.1.2-2.415.el6_5.14, qemu-kvm-2:0.12.1.2-2.415.el6_5.14 +1
- Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.415.el6_5.14, qemu-img-2:0.12.1.2-2.415.el6_5.14, qemu-kvm-2:0.12.1.2-2.415.el6_5.14 +1
- Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.415.el6_5.14, qemu-img-2:0.12.1.2-2.415.el6_5.14, qemu-kvm-2:0.12.1.2-2.415.el6_5.14 +1
Fixes 2 records
Priority LOW 37
Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02116 · Published 2014-11-04 · Partial fix CWE-189
Priority LOW 22
Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a large image size, which triggers a buffer…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00605 · Published 2014-11-04 · Partial fix CWE-189
