Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0019-1

Опубликовано: 04 янв. 2018
Источник: suse-cvrf

Описание

Security update for kvm

This update for kvm fixes the following issues:

Also a mitigation for a security flaw has been applied:

  • CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to allow enabling/disabling branch prediction features in the Intel CPU. (bsc#1068032)

Security fixes have been applied:

  • CVE-2017-2633: Fix various out of bounds access issues in the QEMU vnc infrastructure (bsc#1026612)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
kvm-1.4.2-60.6.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
kvm-1.4.2-60.6.1

Ссылки

Описание

An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:kvm-1.4.2-60.6.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:kvm-1.4.2-60.6.1
Ссылки

Описание

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:kvm-1.4.2-60.6.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:kvm-1.4.2-60.6.1
Ссылки
Уязвимость SUSE-SU-2018:0019-1