Red Hat Security AdvisoryRHSA-2015:0891
qemu-kvm-rhev security update
Released 2015-04-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 4.0 qemu-img-rhev-2:0.12.1.2-2.448.el6_6.2, qemu-kvm-rhev-2:0.12.1.2-2.448.el6_6.2, qemu-kvm-rhev-tools-2:0.12.1.2-2.448.el6_6.2
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 qemu-img-rhev-2:0.12.1.2-2.448.el6_6.2, qemu-kvm-rhev-2:0.12.1.2-2.448.el6_6.2, qemu-kvm-rhev-tools-2:0.12.1.2-2.448.el6_6.2
Fixes 1 record
Priority LOW 22
Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00603 · Published 2014-12-08 · Partial fix CWE-119
