Red Hat Security Advisory

RHSA-2015:0868

qemu-kvm-rhev security and bug fix update

Released 2015-04-21 · Red Hat rating Important · View on Red Hat →

Fixed in

RHEV Agents (vdsm) qemu-img-rhev-2:0.12.1.2-2.448.el6_6.2, qemu-kvm-rhev-2:0.12.1.2-2.448.el6_6.2, qemu-kvm-rhev-tools-2:0.12.1.2-2.448.el6_6.2

Fixes 1 record

TI-2014-06723 CVE-2014-8106 · GHSA-g3gg-2j77-h4r4

Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU…

LOW 22

Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00603 Published 2014-12-08 Partial fix CWE-119