Red Hat Security AdvisoryRHSA-2015:1833
qemu-kvm security update
Released 2015-09-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.479.el6_7.1, qemu-img-2:0.12.1.2-2.479.el6_7.1, qemu-kvm-2:0.12.1.2-2.479.el6_7.1 +1
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.479.el6_7.1, qemu-img-2:0.12.1.2-2.479.el6_7.1, qemu-kvm-2:0.12.1.2-2.479.el6_7.1 +1
- Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.479.el6_7.1, qemu-img-2:0.12.1.2-2.479.el6_7.1, qemu-kvm-2:0.12.1.2-2.479.el6_7.1 +1
- Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.479.el6_7.1, qemu-img-2:0.12.1.2-2.479.el6_7.1, qemu-kvm-2:0.12.1.2-2.479.el6_7.1 +1
Fixes 1 record
Priority MEDIUM 55
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.13288 · Published 2015-08-12 · Partial fix CWE-908
