RedHatRHSA-2016:2576(RHSA-2016:2576) Moderate: libguestfs and virt-p2v security, bug fix, and enhancement update
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
0.022 Low
EPSS
Percentile
89.2%
The libguestfs packages contain a library, which is used for accessing and modifying virtual machine (VM) disk images.
Virt-p2v is a tool for conversion of a physical server to a virtual guest.
The following packages have been upgraded to a newer upstream version: libguestfs (1.32.7), virt-p2v (1.32.7). (BZ#1218766)
Security Fix(es):
- An integer conversion flaw was found in the way OCaml’s String handled its length. Certain operations on an excessively long String could trigger a buffer overflow or result in an information leak. (CVE-2015-8869)
Note: The libguestfs packages in this advisory were rebuilt with a fixed version of OCaml to address this issue.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | noarch | libguestfs-man-pages-uk | < 1.32.7-3.el7 | libguestfs-man-pages-uk-1.32.7-3.el7.noarch.rpm |
| RedHat | 7 | x86_64 | virt-dib | < 1.32.7-3.el7 | virt-dib-1.32.7-3.el7.x86_64.rpm |
| RedHat | 7 | x86_64 | libguestfs-gobject-devel | < 1.32.7-3.el7 | libguestfs-gobject-devel-1.32.7-3.el7.x86_64.rpm |
| RedHat | 7 | x86_64 | perl-sys-guestfs | < 1.32.7-3.el7 | perl-Sys-Guestfs-1.32.7-3.el7.x86_64.rpm |
| RedHat | 7 | x86_64 | ocaml-libguestfs | < 1.32.7-3.el7 | ocaml-libguestfs-1.32.7-3.el7.x86_64.rpm |
| RedHat | 7 | x86_64 | libguestfs | < 1.32.7-3.el7 | libguestfs-1.32.7-3.el7.x86_64.rpm |
| RedHat | 7 | x86_64 | ocaml-libguestfs-devel | < 1.32.7-3.el7 | ocaml-libguestfs-devel-1.32.7-3.el7.x86_64.rpm |
| RedHat | 7 | x86_64 | lua-guestfs | < 1.32.7-3.el7 | lua-guestfs-1.32.7-3.el7.x86_64.rpm |
| RedHat | 7 | noarch | libguestfs-man-pages-ja | < 1.32.7-3.el7 | libguestfs-man-pages-ja-1.32.7-3.el7.noarch.rpm |
| RedHat | 7 | x86_64 | libguestfs-debuginfo | < 1.32.7-3.el7 | libguestfs-debuginfo-1.32.7-3.el7.x86_64.rpm |
Related
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
0.022 Low
EPSS
Percentile
89.2%