Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:1519-1

Опубликовано: 08 июн. 2015
Источник: suse-cvrf

Описание

Security update for qemu

qemu was updated to fix two security issues and augments one non-security bug fix.

The following vulnerabilities were fixed:

  • CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to host escape (XSA-135) (bsc#932770)
  • CVE-2015-4037: Avoid predictable directory name for smb config (bsc#932267)

The fix for the following non-security bug was improved:

  • bsc#893892: Use improved upstream patch for display issue affecting installs of SLES 11 VMs on SLES 12

Список пакетов

SUSE Linux Enterprise Desktop 12
qemu-2.0.2-48.4.1
qemu-block-curl-2.0.2-48.4.1
qemu-ipxe-1.0.0-48.4.1
qemu-kvm-2.0.2-48.4.1
qemu-seabios-1.7.4-48.4.1
qemu-sgabios-8-48.4.1
qemu-tools-2.0.2-48.4.1
qemu-vgabios-1.7.4-48.4.1
qemu-x86-2.0.2-48.4.1
SUSE Linux Enterprise Server 12
qemu-2.0.2-48.4.1
qemu-block-curl-2.0.2-48.4.1
qemu-block-rbd-2.0.2-48.4.1
qemu-guest-agent-2.0.2-48.4.1
qemu-ipxe-1.0.0-48.4.1
qemu-kvm-2.0.2-48.4.1
qemu-lang-2.0.2-48.4.1
qemu-ppc-2.0.2-48.4.1
qemu-s390-2.0.2-48.4.1
qemu-seabios-1.7.4-48.4.1
qemu-sgabios-8-48.4.1
qemu-tools-2.0.2-48.4.1
qemu-vgabios-1.7.4-48.4.1
qemu-x86-2.0.2-48.4.1
SUSE Linux Enterprise Server for SAP Applications 12
qemu-2.0.2-48.4.1
qemu-block-curl-2.0.2-48.4.1
qemu-block-rbd-2.0.2-48.4.1
qemu-guest-agent-2.0.2-48.4.1
qemu-ipxe-1.0.0-48.4.1
qemu-kvm-2.0.2-48.4.1
qemu-lang-2.0.2-48.4.1
qemu-ppc-2.0.2-48.4.1
qemu-s390-2.0.2-48.4.1
qemu-seabios-1.7.4-48.4.1
qemu-sgabios-8-48.4.1
qemu-tools-2.0.2-48.4.1
qemu-vgabios-1.7.4-48.4.1
qemu-x86-2.0.2-48.4.1

Ссылки

Описание

Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.

Затронутые продукты
SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.4.1
SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.4.1
SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.4.1
SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.4.1
Ссылки

Описание

The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.*-* files before the program.

Затронутые продукты
SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.4.1
SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.4.1
SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.4.1
SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.4.1
Ссылки
Уязвимость SUSE-SU-2015:1519-1