Red Hat Security AdvisoryRHSA-2016:0724
qemu-kvm security update
Released 2016-05-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libcacard-10:1.5.3-105.el7_2.4, qemu-img-10:1.5.3-105.el7_2.4, qemu-kvm-10:1.5.3-105.el7_2.4 +2
- Red Hat Enterprise Linux Client Optional (v. 7) libcacard-devel-10:1.5.3-105.el7_2.4, libcacard-tools-10:1.5.3-105.el7_2.4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcacard-10:1.5.3-105.el7_2.4, libcacard-devel-10:1.5.3-105.el7_2.4, libcacard-tools-10:1.5.3-105.el7_2.4 +4
- Red Hat Enterprise Linux Server (v. 7) libcacard-10:1.5.3-105.el7_2.4, qemu-img-10:1.5.3-105.el7_2.4, qemu-kvm-10:1.5.3-105.el7_2.4 +2
- Red Hat Enterprise Linux Server Optional (v. 7) libcacard-10:1.5.3-105.el7_2.4, libcacard-10:1.5.3-105.el7_2.4.ppc, libcacard-devel-10:1.5.3-105.el7_2.4 +2
- Red Hat Enterprise Linux Workstation (v. 7) libcacard-10:1.5.3-105.el7_2.4, qemu-img-10:1.5.3-105.el7_2.4, qemu-kvm-10:1.5.3-105.el7_2.4 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) libcacard-devel-10:1.5.3-105.el7_2.4, libcacard-tools-10:1.5.3-105.el7_2.4
Fixes 1 record
Priority MEDIUM 40
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the ban…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00916 · Published 2016-05-11 · Partial fix CWE-119
