Red Hat Security AdvisoryRHSA-2016:2585
qemu-kvm security, bug fix, and enhancement update
Released 2016-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-126.el7, qemu-kvm-10:1.5.3-126.el7, qemu-kvm-common-10:1.5.3-126.el7 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-126.el7, qemu-kvm-10:1.5.3-126.el7, qemu-kvm-common-10:1.5.3-126.el7 +1
- Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-126.el7, qemu-kvm-10:1.5.3-126.el7, qemu-kvm-common-10:1.5.3-126.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-126.el7, qemu-kvm-10:1.5.3-126.el7, qemu-kvm-common-10:1.5.3-126.el7 +1
Fixes 2 records
Priority LOW 25
Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00513 · Published 2016-05-11 · Partial fix CWE-190
Priority LOW 25
QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00444 · Published 2016-12-29 · Partial fix CWE-835
