Red Hat Security AdvisoryRHSA-2016:1606
qemu-kvm security update
Released 2016-08-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libcacard-10:1.5.3-105.el7_2.7, qemu-img-10:1.5.3-105.el7_2.7, qemu-kvm-10:1.5.3-105.el7_2.7 +2
- Red Hat Enterprise Linux Client Optional (v. 7) libcacard-devel-10:1.5.3-105.el7_2.7, libcacard-tools-10:1.5.3-105.el7_2.7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcacard-10:1.5.3-105.el7_2.7, libcacard-devel-10:1.5.3-105.el7_2.7, libcacard-tools-10:1.5.3-105.el7_2.7 +4
- Red Hat Enterprise Linux Server (v. 7) libcacard-10:1.5.3-105.el7_2.7, qemu-img-10:1.5.3-105.el7_2.7, qemu-kvm-10:1.5.3-105.el7_2.7 +2
- Red Hat Enterprise Linux Server Optional (v. 7) libcacard-10:1.5.3-105.el7_2.7, libcacard-10:1.5.3-105.el7_2.7.ppc, libcacard-devel-10:1.5.3-105.el7_2.7 +2
- Red Hat Enterprise Linux Workstation (v. 7) libcacard-10:1.5.3-105.el7_2.7, qemu-img-10:1.5.3-105.el7_2.7, qemu-kvm-10:1.5.3-105.el7_2.7 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) libcacard-devel-10:1.5.3-105.el7_2.7, libcacard-tools-10:1.5.3-105.el7_2.7
Fixes 2 records
Priority LOW 35
Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asy…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00701 · Published 2016-06-01 · Fixed CWE-787
Priority LOW 25
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0052 · Published 2016-08-02 · Partial fix CWE-400
