| Revision Date: | 2016-08-11 | Version: | 636 |
| Title: | RHSA-2016:1606: qemu-kvm security update (Moderate) |
| Description: | KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm packages provide the user-space component for running virtual machines using KVM.
Security Fix(es):
Quick Emulator(Qemu) built with the Block driver for iSCSI images support (virtio-blk) is vulnerable to a heap buffer overflow issue. It could occur while processing iSCSI asynchronous I/O ioctl(2) calls. A user inside guest could use this flaw to crash the Qemu process resulting in DoS or potentially leverage it to execute arbitrary code with privileges of the Qemu process on the host. (CVE-2016-5126)
Quick emulator(Qemu) built with the virtio framework is vulnerable to an unbounded memory allocation issue. It was found that a malicious guest user could submit more requests than the virtqueue size permits. Processing a request allocates a VirtQueueElement and therefore causes unbounded memory allocation on the host controlled by the guest. (CVE-2016-5403)
Red Hat would like to thank hongzhenhao (Marvel Team) for reporting CVE-2016-5403.
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | CVE-2016-5126
CVE-2016-5403
RHSA-2016:1606
RHSA-2016:1606-00
RHSA-2016:1606-01
RHSA-2016:1606-01
|
| Platform(s): | Red Hat Enterprise Linux 7
| Product(s): | |
| Definition Synopsis |
| Red Hat Enterprise Linux must be installed OR Package Information
Red Hat Enterprise Linux 7 is installed
AND
libcacard is earlier than 10:1.5.3-105.el7_2.7
AND libcacard is signed with Red Hat redhatrelease2 key
libcacard-devel is earlier than 10:1.5.3-105.el7_2.7
AND libcacard-devel is signed with Red Hat redhatrelease2 key
libcacard-tools is earlier than 10:1.5.3-105.el7_2.7
AND libcacard-tools is signed with Red Hat redhatrelease2 key
qemu-img is earlier than 10:1.5.3-105.el7_2.7
AND qemu-img is signed with Red Hat redhatrelease2 key
qemu-kvm is earlier than 10:1.5.3-105.el7_2.7
AND qemu-kvm is signed with Red Hat redhatrelease2 key
qemu-kvm-common is earlier than 10:1.5.3-105.el7_2.7
AND qemu-kvm-common is signed with Red Hat redhatrelease2 key
qemu-kvm-tools is earlier than 10:1.5.3-105.el7_2.7
AND qemu-kvm-tools is signed with Red Hat redhatrelease2 key
|