Red Hat Security AdvisoryRHSA-2015:2694
qemu-kvm security update
Released 2015-12-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.479.el6_7.3, qemu-img-2:0.12.1.2-2.479.el6_7.3, qemu-kvm-2:0.12.1.2-2.479.el6_7.3 +1
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.479.el6_7.3, qemu-img-2:0.12.1.2-2.479.el6_7.3, qemu-kvm-2:0.12.1.2-2.479.el6_7.3 +1
- Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.479.el6_7.3, qemu-img-2:0.12.1.2-2.479.el6_7.3, qemu-kvm-2:0.12.1.2-2.479.el6_7.3 +1
- Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.479.el6_7.3, qemu-img-2:0.12.1.2-2.479.el6_7.3, qemu-kvm-2:0.12.1.2-2.479.el6_7.3 +1
Fixes 2 records
Priority MEDIUM 49
Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large pack…
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.0773 · Published 2016-01-08 · Partial fix CWE-120
Priority LOW 39
Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets i…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00642 · Published 2017-10-16 · Partial fix CWE-787
