Red Hat Security AdvisoryRHSA-2017:0083
qemu-kvm security and bug fix update
Released 2017-01-17 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-126.el7_3.3, qemu-kvm-10:1.5.3-126.el7_3.3, qemu-kvm-common-10:1.5.3-126.el7_3.3 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-126.el7_3.3, qemu-kvm-10:1.5.3-126.el7_3.3, qemu-kvm-common-10:1.5.3-126.el7_3.3 +1
- Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-126.el7_3.3, qemu-kvm-10:1.5.3-126.el7_3.3, qemu-kvm-common-10:1.5.3-126.el7_3.3 +1
- Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-126.el7_3.3, qemu-kvm-10:1.5.3-126.el7_3.3, qemu-kvm-common-10:1.5.3-126.el7_3.3 +1
Fixes 1 record
Priority LOW 37
The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.
CVSS 3.1HIGH 8.4· Local · Low privileges · No interaction · EPSS 0.00564 · Published 2016-04-08 · Partial fix CWE-119
