Red Hat Security AdvisoryRHSA-2014:1076
qemu-kvm-rhev security and bug fix update
Released 2014-08-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEV Agents (vdsm) qemu-img-rhev-2:0.12.1.2-2.415.el6_5.14, qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.14, qemu-kvm-rhev-tools-2:0.12.1.2-2.415.el6_5.14
Fixes 2 records
Priority LOW 37
Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02116 · Published 2014-11-04 · Partial fix CWE-189
Priority LOW 22
Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a large image size, which triggers a buffer…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00605 · Published 2014-11-04 · Partial fix CWE-189
