Red Hat Security AdvisoryRHSA-2015:1087
qemu-kvm security update
Released 2015-06-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.448.el6_6.4, qemu-img-2:0.12.1.2-2.448.el6_6.4, qemu-kvm-2:0.12.1.2-2.448.el6_6.4 +1
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.448.el6_6.4, qemu-img-2:0.12.1.2-2.448.el6_6.4, qemu-kvm-2:0.12.1.2-2.448.el6_6.4 +1
- Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.448.el6_6.4, qemu-img-2:0.12.1.2-2.448.el6_6.4, qemu-kvm-2:0.12.1.2-2.448.el6_6.4 +1
- Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.448.el6_6.4, qemu-img-2:0.12.1.2-2.448.el6_6.4, qemu-kvm-2:0.12.1.2-2.448.el6_6.4 +1
Fixes 1 record
Priority MEDIUM 45
Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.09679 · Published 2015-06-15 · Partial fix CWE-787
