Red Hat Security Advisory

RHSA-2016:1655

qemu-kvm-rhev security update

Released 2016-08-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 libcacard-devel-rhev-10:2.3.0-31.el7_2.21, libcacard-rhev-10:2.3.0-31.el7_2.21, libcacard-tools-rhev-10:2.3.0-31.el7_2.21 +4

Fixes 2 records

TI-2016-04427 CVE-2016-5126 · GHSA-qgv9-9qpm-r86f

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU…

LOW 35

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asy…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00701 Published 2016-06-01 Fixed CWE-787

TI-2016-04681 CVE-2016-5403 · GHSA-w9gj-prpq-pxm9

The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS…

LOW 25

The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0052 Published 2016-08-02 Partial fix CWE-400