Red Hat Security AdvisoryRHSA-2017:2445
qemu-kvm security update
Released 2017-08-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-141.el7_4.1, qemu-kvm-10:1.5.3-141.el7_4.1, qemu-kvm-common-10:1.5.3-141.el7_4.1 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-141.el7_4.1, qemu-kvm-10:1.5.3-141.el7_4.1, qemu-kvm-common-10:1.5.3-141.el7_4.1 +1
- Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-141.el7_4.1, qemu-kvm-10:1.5.3-141.el7_4.1, qemu-kvm-common-10:1.5.3-141.el7_4.1 +1
- Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-141.el7_4.1, qemu-kvm-10:1.5.3-141.el7_4.1, qemu-kvm-common-10:1.5.3-141.el7_4.1 +1
Fixes 1 record
Priority MEDIUM 40
qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04028 · Published 2017-08-02 · Partial fix
