Red Hat Security AdvisoryRHSA-2015:1943
qemu-kvm security update
Released 2015-10-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libcacard-10:1.5.3-86.el7_1.8, qemu-img-10:1.5.3-86.el7_1.8, qemu-kvm-10:1.5.3-86.el7_1.8 +2
- Red Hat Enterprise Linux Client Optional (v. 7) libcacard-devel-10:1.5.3-86.el7_1.8, libcacard-tools-10:1.5.3-86.el7_1.8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcacard-10:1.5.3-86.el7_1.8, libcacard-devel-10:1.5.3-86.el7_1.8, libcacard-tools-10:1.5.3-86.el7_1.8 +4
- Red Hat Enterprise Linux Server (v. 7) libcacard-10:1.5.3-86.el7_1.8, qemu-img-10:1.5.3-86.el7_1.8, qemu-kvm-10:1.5.3-86.el7_1.8 +2
- Red Hat Enterprise Linux Server Optional (v. 7) libcacard-10:1.5.3-86.el7_1.8, libcacard-10:1.5.3-86.el7_1.8.ppc, libcacard-devel-10:1.5.3-86.el7_1.8 +2
- Red Hat Enterprise Linux Workstation (v. 7) libcacard-10:1.5.3-86.el7_1.8, qemu-img-10:1.5.3-86.el7_1.8, qemu-kvm-10:1.5.3-86.el7_1.8 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) libcacard-devel-10:1.5.3-86.el7_1.8, libcacard-tools-10:1.5.3-86.el7_1.8
Fixes 1 record
Priority MEDIUM 47
The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.06571 · Published 2016-01-12 · Partial fix CWE-400
