Red Hat Security Advisory

RHSA-2016:1652

qemu-kvm-rhev security update

Released 2016-08-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 qemu-img-rhev-2:0.12.1.2-2.491.el6_8.3, qemu-kvm-rhev-2:0.12.1.2-2.491.el6_8.3, qemu-kvm-rhev-tools-2:0.12.1.2-2.491.el6_8.3

Fixes 1 record

TI-2016-04681 CVE-2016-5403 · GHSA-w9gj-prpq-pxm9

The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS…

LOW 25

The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0052 Published 2016-08-02 Partial fix CWE-400