Red Hat Security AdvisoryRHSA-2014:1187
qemu-kvm-rhev security update
Released 2014-09-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 4.0 qemu-img-rhev-2:0.12.1.2-2.415.el6_5.14, qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.14, qemu-kvm-rhev-tools-2:0.12.1.2-2.415.el6_5.14
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 qemu-img-rhev-2:0.12.1.2-2.415.el6_5.14, qemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.14, qemu-kvm-rhev-tools-2:0.12.1.2-2.415.el6_5.14
Fixes 2 records
Priority LOW 37
Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02116 · Published 2014-11-04 · Partial fix CWE-189
Priority LOW 22
Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a large image size, which triggers a buffer…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00605 · Published 2014-11-04 · Partial fix CWE-189
