Red Hat Security AdvisoryRHSA-2015:2695
qemu-kvm-rhev security update
Released 2015-12-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 qemu-img-rhev-2:0.12.1.2-2.479.el6_7.3, qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.3, qemu-kvm-rhev-tools-2:0.12.1.2-2.479.el6_7.3
Fixes 2 records
Priority MEDIUM 49
Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large pack…
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.0773 · Published 2016-01-08 · Partial fix CWE-120
Priority LOW 39
Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets i…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00642 · Published 2017-10-16 · Partial fix CWE-787
