Red Hat Security AdvisoryRHSA-2015:1793
qemu-kvm security fix update
Released 2015-09-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libcacard-10:1.5.3-86.el7_1.6, qemu-img-10:1.5.3-86.el7_1.6, qemu-kvm-10:1.5.3-86.el7_1.6 +2
- Red Hat Enterprise Linux Client Optional (v. 7) libcacard-devel-10:1.5.3-86.el7_1.6, libcacard-tools-10:1.5.3-86.el7_1.6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcacard-10:1.5.3-86.el7_1.6, libcacard-devel-10:1.5.3-86.el7_1.6, libcacard-tools-10:1.5.3-86.el7_1.6 +4
- Red Hat Enterprise Linux Server (v. 7) libcacard-10:1.5.3-86.el7_1.6, qemu-img-10:1.5.3-86.el7_1.6, qemu-kvm-10:1.5.3-86.el7_1.6 +2
- Red Hat Enterprise Linux Server Optional (v. 7) libcacard-10:1.5.3-86.el7_1.6, libcacard-10:1.5.3-86.el7_1.6.ppc, libcacard-devel-10:1.5.3-86.el7_1.6 +2
- Red Hat Enterprise Linux Workstation (v. 7) libcacard-10:1.5.3-86.el7_1.6, qemu-img-10:1.5.3-86.el7_1.6, qemu-kvm-10:1.5.3-86.el7_1.6 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) libcacard-devel-10:1.5.3-86.el7_1.6, libcacard-tools-10:1.5.3-86.el7_1.6
Fixes 1 record
Priority MEDIUM 55
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.13288 · Published 2015-08-12 · Partial fix CWE-908
