Red Hat Security AdvisoryRHSA-2016:0997
qemu-kvm security update
Released 2016-05-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.491.el6_8.1, qemu-img-2:0.12.1.2-2.491.el6_8.1, qemu-kvm-2:0.12.1.2-2.491.el6_8.1 +1
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.491.el6_8.1, qemu-img-2:0.12.1.2-2.491.el6_8.1, qemu-kvm-2:0.12.1.2-2.491.el6_8.1 +1
- Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.491.el6_8.1, qemu-img-2:0.12.1.2-2.491.el6_8.1, qemu-kvm-2:0.12.1.2-2.491.el6_8.1 +1
- Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.491.el6_8.1, qemu-img-2:0.12.1.2-2.491.el6_8.1, qemu-kvm-2:0.12.1.2-2.491.el6_8.1 +1
Fixes 1 record
Priority MEDIUM 40
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the ban…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00916 · Published 2016-05-11 · Partial fix CWE-119
