RHSA-2017:3368-01 -- Redhat qemu-kvmID: oval:org.secpod.oval:def:502202 | Date: (C)2017-12-04 (M)2024-01-29 |
Class: PATCH | Family: unix |
Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm package provides the user-space component for running virtual machines that use KVM. Security Fix: * Quick Emulator , compiled with the PC System Emulator with multiboot feature support, is vulnerable to an OOB r/w memory access issue. The issue could occur due to an integer overflow while loading a kernel image during a guest boot. A user or process could use this flaw to potentially achieve arbitrary code execution on a host. * Quick emulator , compiled with the Cirrus CLGD 54xx VGA Emulator support, is vulnerable to an OOB write access issue. The issue could occur while writing to VGA memory via mode4and5 write functions. A privileged user inside guest could use this flaw to crash the QEMU process resulting in Denial of Serivce . Red Hat would like to thank Thomas Garnier for reporting CVE-2017-14167 and Guoxiang Niu for reporting CVE-2017-15289.
Platform: |
Red Hat Enterprise Linux 7 |