Red Hat Security Advisory

RHSA-2015:1931

qemu-kvm-rhev security update

Released 2015-10-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHEV-H and VDSM for 7 Hosts libcacard-devel-rhev-10:2.1.2-23.el7_1.10, libcacard-rhev-10:2.1.2-23.el7_1.10, libcacard-tools-rhev-10:2.1.2-23.el7_1.10 +4

Fixes 1 record

TI-2015-01597 CVE-2015-1779 · GHSA-cmjj-4jjr-c8vv

The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of…

MEDIUM 47

The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.06571 Published 2016-01-12 Partial fix CWE-400