Red Hat Security AdvisoryRHSA-2016:0084
qemu-kvm-rhev security and bug fix update
Released 2016-01-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEV Power Host libcacard-devel-rhev-10:2.3.0-31.el7_2.7, libcacard-rhev-10:2.3.0-31.el7_2.7, libcacard-tools-rhev-10:2.3.0-31.el7_2.7 +4
- RHEV-H and VDSM for 7 Hosts libcacard-devel-rhev-10:2.3.0-31.el7_2.7, libcacard-rhev-10:2.3.0-31.el7_2.7, libcacard-tools-rhev-10:2.3.0-31.el7_2.7 +4
Fixes 2 records
Priority MEDIUM 44
The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to ca…
CVSS 3.0HIGH 8.1· Local · No auth · No interaction · EPSS 0.06085 · Published 2016-04-07 · Partial fix CWE-119
Priority LOW 39
Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHC…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00533 · Published 2016-04-08 · Partial fix CWE-416
