Red Hat Security AdvisoryRHSA-2015:1508
qemu-kvm-rhev security update
Released 2015-07-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEV-H and VDSM for 7 Hosts libcacard-devel-rhev-10:2.1.2-23.el7_1.6, libcacard-rhev-10:2.1.2-23.el7_1.6, libcacard-tools-rhev-10:2.1.2-23.el7_1.6 +4
Fixes 2 records
Priority LOW 34
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host O…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.01594 · Published 2015-08-31 · Partial fix CWE-119
Priority LOW 33
Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAP…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.0063 · Published 2015-08-12 · Partial fix CWE-119
