Red Hat Security AdvisoryRHSA-2015:0867
qemu-kvm security and bug fix update
Released 2015-04-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.448.el6_6.2, qemu-img-2:0.12.1.2-2.448.el6_6.2, qemu-kvm-2:0.12.1.2-2.448.el6_6.2 +1
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.448.el6_6.2, qemu-img-2:0.12.1.2-2.448.el6_6.2, qemu-kvm-2:0.12.1.2-2.448.el6_6.2 +1
- Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.448.el6_6.2, qemu-img-2:0.12.1.2-2.448.el6_6.2, qemu-kvm-2:0.12.1.2-2.448.el6_6.2 +1
- Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.448.el6_6.2, qemu-img-2:0.12.1.2-2.448.el6_6.2, qemu-kvm-2:0.12.1.2-2.448.el6_6.2 +1
Fixes 1 record
Priority LOW 22
Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00603 · Published 2014-12-08 · Partial fix CWE-119
