Red Hat Security AdvisoryRHSA-2017:0621
qemu-kvm security and bug fix update
Released 2017-03-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.503.el6, qemu-img-2:0.12.1.2-2.503.el6, qemu-kvm-2:0.12.1.2-2.503.el6 +1
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.503.el6, qemu-img-2:0.12.1.2-2.503.el6, qemu-kvm-2:0.12.1.2-2.503.el6 +1
- Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.503.el6, qemu-img-2:0.12.1.2-2.503.el6, qemu-kvm-2:0.12.1.2-2.503.el6 +1
- Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.503.el6, qemu-img-2:0.12.1.2-2.503.el6, qemu-kvm-2:0.12.1.2-2.503.el6 +1
Fixes 1 record
Priority LOW 25
Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00513 · Published 2016-05-11 · Partial fix CWE-190
