Описание
ELSA-2016-1606: qemu-kvm security update (MODERATE)
[1.5.3-105.el7_2.7]
- kvm-block-iscsi-avoid-potential-overflow-of-acb-task-cdb.patch [bz#1358996]
- Resolves: bz#1358996 (CVE-2016-5126 qemu-kvm: Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl [rhel-7.2.z])
[1.5.3-105.el7_2.6]
- kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359728]
- Resolves: bz#1359728 (EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-7.2.z])
[1.5.3-105.el7_2.5]
- kvm-vga-add-sr_vbe-register-set.patch [bz#1347527]
- Resolves: bz#1347527 (Regression from CVE-2016-3712: windows installer fails to start)
Обновленные пакеты
Oracle Linux 7
Oracle Linux x86_64
libcacard
1.5.3-105.el7_2.7
libcacard-devel
1.5.3-105.el7_2.7
libcacard-tools
1.5.3-105.el7_2.7
qemu-img
1.5.3-105.el7_2.7
qemu-kvm
1.5.3-105.el7_2.7
qemu-kvm-common
1.5.3-105.el7_2.7
qemu-kvm-tools
1.5.3-105.el7_2.7
Связанные CVE
Связанные уязвимости
Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
Heap-based buffer overflow in the iscsi_aio_ioctl function in block/is ...
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.