Red Hat Security AdvisoryRHSA-2016:1585
qemu-kvm security update
Released 2016-08-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.491.el6_8.3, qemu-img-2:0.12.1.2-2.491.el6_8.3, qemu-kvm-2:0.12.1.2-2.491.el6_8.3 +1
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.491.el6_8.3, qemu-img-2:0.12.1.2-2.491.el6_8.3, qemu-kvm-2:0.12.1.2-2.491.el6_8.3 +1
- Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.491.el6_8.3, qemu-img-2:0.12.1.2-2.491.el6_8.3, qemu-kvm-2:0.12.1.2-2.491.el6_8.3 +1
- Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.491.el6_8.3, qemu-img-2:0.12.1.2-2.491.el6_8.3, qemu-kvm-2:0.12.1.2-2.491.el6_8.3 +1
Fixes 1 record
Priority LOW 25
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0052 · Published 2016-08-02 · Partial fix CWE-400
