[SECURITY] [DSA 3285-1] qemu-kvm security update

🗓️ 12 Jun 2015 22:51:04Reported by DebianType

debian

debian🔗 lists.debian.org👁 39 Views

Debian Security Advisory for qemu-kvm virtualization solution, fixes multiple vulnerabilities

Reporter	Title	Published	Views	Family All 215
FreeBSD	qemu -- Heap overflow in QEMU PCNET controller, allowing guest to host escape (CVE-2015-3209)	10 Apr 201500:00	–	freebsd
Arista	Security Advisory 0013	4 Sep 201500:00	–	arista
IBM Security Bulletins	Security Bulletin: PowerKVM is affected by two Qemu vulnerabilities	18 Jun 201801:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in qemu-kvm affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance	17 Jun 201822:33	–	ibm
BDU FSTEC	The vulnerability of the QEMU hardware emulation software allows a hacker to execute arbitrary code.	2 Jul 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Xen hypervisors allows a perpetrator to execute arbitrary code.	30 Jun 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure	16 Sep 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 6 : qemu-kvm (CESA-2015:1087)	11 Jun 201500:00	–	nessus
Tenable Nessus	CentOS 5 : kvm (CESA-2015:1189)	26 Jun 201500:00	–	nessus
Tenable Nessus	Debian DSA-3284-1 : qemu - security update	15 Jun 201500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	7	amd64	kvm	1:1.1.2+dfsg-6+deb7u8	kvm_1:1.1.2+dfsg-6+deb7u8_amd64.deb
Debian	7	i386	kvm	1:1.1.2+dfsg-6+deb7u8	kvm_1:1.1.2+dfsg-6+deb7u8_i386.deb
Debian	7	any	qemu-kvm	1.1.2+dfsg-6+deb7u8	qemu-kvm_1.1.2+dfsg-6+deb7u8_any.deb
Debian	7	amd64	qemu-kvm-dbg	1.1.2+dfsg-6+deb7u8	qemu-kvm-dbg_1.1.2+dfsg-6+deb7u8_amd64.deb
Debian	7	i386	qemu-kvm-dbg	1.1.2+dfsg-6+deb7u8	qemu-kvm-dbg_1.1.2+dfsg-6+deb7u8_i386.deb

12 Jun 2015 22:51Current

9.2High risk

Vulners AI Score9.2

CVSS 27.5

EPSS0.09668

qemu amd pcnet ethernet arbitrary code red hat networking denial of service