Red Hat Security Advisory

RHSA-2015:1088

qemu-kvm-rhev security update

Released 2015-06-10 · Red Hat rating Important · View on Red Hat →

Fixed in

RHEV Agents (vdsm) qemu-img-rhev-2:0.12.1.2-2.448.el6_6.4, qemu-kvm-rhev-2:0.12.1.2-2.448.el6_6.4, qemu-kvm-rhev-tools-2:0.12.1.2-2.448.el6_6.4

Fixes 1 record

TI-2015-02838 CVE-2015-3209 · GHSA-f8hq-r3jp-2m27

Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to…

MEDIUM 45

Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09679 Published 2015-06-15 Partial fix CWE-787