Red Hat Security AdvisoryRHSA-2016:1943
kvm security update
Released 2016-09-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) kmod-kvm-83-276.el5_11, kmod-kvm-debug-83-276.el5_11, kvm-83-276.el5_11 +2
- Red Hat Enterprise Linux Virtualization (v. 5 server) kmod-kvm-83-276.el5_11, kmod-kvm-debug-83-276.el5_11, kvm-83-276.el5_11 +2
Fixes 2 records
Priority MEDIUM 40
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the ban…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00916 · Published 2016-05-11 · Partial fix CWE-119
Priority LOW 25
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0052 · Published 2016-08-02 · Partial fix CWE-400
