Red Hat Security Advisory

RHSA-2014:1669

qemu-kvm security and bug fix update

Released 2014-10-20 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libcacard-10:1.5.3-60.el7_0.10, qemu-guest-agent-10:1.5.3-60.el7_0.10, qemu-img-10:1.5.3-60.el7_0.10 +3
Red Hat Enterprise Linux Client Optional (v. 7) libcacard-devel-10:1.5.3-60.el7_0.10, libcacard-tools-10:1.5.3-60.el7_0.10, qemu-guest-agent-10:1.5.3-60.el7_0.10
Red Hat Enterprise Linux ComputeNode (v. 7) qemu-guest-agent-10:1.5.3-60.el7_0.10, qemu-kvm-10:1.5.3-60.el7_0.10
Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcacard-10:1.5.3-60.el7_0.10, libcacard-devel-10:1.5.3-60.el7_0.10, libcacard-tools-10:1.5.3-60.el7_0.10 +5
Red Hat Enterprise Linux Server (v. 7) libcacard-10:1.5.3-60.el7_0.10, qemu-guest-agent-10:1.5.3-60.el7_0.10, qemu-img-10:1.5.3-60.el7_0.10 +3
Red Hat Enterprise Linux Server Optional (v. 7) libcacard-devel-10:1.5.3-60.el7_0.10, libcacard-tools-10:1.5.3-60.el7_0.10, qemu-guest-agent-10:1.5.3-60.el7_0.10
Red Hat Enterprise Linux Workstation (v. 7) libcacard-10:1.5.3-60.el7_0.10, qemu-guest-agent-10:1.5.3-60.el7_0.10, qemu-img-10:1.5.3-60.el7_0.10 +3
Red Hat Enterprise Linux Workstation Optional (v. 7) libcacard-devel-10:1.5.3-60.el7_0.10, libcacard-tools-10:1.5.3-60.el7_0.10, qemu-guest-agent-10:1.5.3-60.el7_0.10

TI-2014-02936 CVE-2014-3615 · GHSA-g423-f8gf-9qh3

LOW 12

The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.0045 Published 2014-11-01 Fixed CWE-200