Security Bulletin: Vulnerabilities in Qemu affect PowerKVM (Multiple Vulnerabilities)

Summary PowerKVM is affected by six vulnerabilities in Qemu. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-5154 DESCRIPTION: QEMU is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the IDE subsystem while processing ATAPI commands. A...

Security Bulletin: Vulnerability in lighttpd affects PowerKVM (CVE-2015-3200)

Summary PowerKVM is affected by a vulnerability in lighttpd CVE-2015-3200. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-3200 DESCRIPTION: lighttpd could allow a remote attacker to bypass security restrictions, caused by the improper validation of input. An attacker could...

Security Bulletin:Vulnerabilities in wpa_supplicant may affect PowerKVM (CVE-2015-1863 and CVE-2015-4142)

Summary Vulnerabilities in wpasupplicant may affect PowerKVM CVE-2015-1863 and CVE-2015-4142. These vulnerability are now fixed. Note that although the code exists in PowerKVM, the functionality is not enabled or supported as shipped. Vulnerability Details CVEID: CVE-2015-1863 DESCRIPTION:...

Security Bulletin: Vulnerability in lcms affects PowerKVM (CVE-2015-4276)

Summary PowerKVM is affected by a vulnerability in little cms CVE-2015-4276. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2013-4276 DESCRIPTION: Little CMS is vulnerable to multiple stack-based buffer overflows, caused by improper bounds checking by the ColorSpace conversion...

Security Bulletin: Vulnerability in Mozilla gdk-pixbuf2 affects PowerKVM (CVE-2015-4491)

Summary PowerKVM is affected by a vulnerability in Mozilla gdb-pixbuf2 CVE-2015-4491. A fix for this vulnerability is available, as described below. Note that this primarily affects Mozilla Firefox, which does not ship with PowerKVM. Vulnerability Details CVEID: CVE-2015-4491 DESCRIPTION: Mozilla...

Security Bulletin: Vulnerability in Net-SNMP affects PowerKVM (CVE-2015-5621)

Summary PowerKVM is affected by a vulnerability in Net-SNMP. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-5621 DESCRIPTION: Net-SNMP is vulnerable to a denial of service, caused by incompletely parsed varBind variables being left in the list of variables by the...

Security Bulletin: Vulnerability in Mozilla NSS affects PowerKVM (CVE-2015-2730)

Summary PowerKVM is affected by a vulnerability in Mozilla NSS CVE-2015-2730. This vulnerability is now fixed. Note that this primarily affects Mozilla Firefox, which does not ship with PowerKVM. Vulnerability Details CVEID: CVE-2015-2730 DESCRIPTION: Mozilla Firefox could allow a remote attacker...

Security Bulletin: Vulnerabilities in Python affect PowerKVM (CVE-2013-5123, CVE-2014-8991)

Summary PowerKVM is affected by two vulnerabilities in Python. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2013-5123 DESCRIPTION: Python pip could allow a remote attacker to bypass security restrictions, caused by the implementation of the mirroring support without...

Security Bulletin: Vulnerabilities in libXfont affect PowerKVM (CVE-2015-1802, CVE-2015-1803, CVE-2015-1804)

Summary PowerKVM is affected by three vulnerabilities in libXfont. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-1802 DESCRIPTION: X.Org libXfont could allow a local attacker to gain elevated privileges on the system, caused by an error in bdfReadProperties in the...

Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM

Summary PowerKVM is affected by nine vulnerabilities in the Linux kernel. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-9729 DESCRIPTION: Linux Kernel, built with the UDF file systemCONFIGUDFFS support, is vulnerable to a denial of service, caused by the failure to...

Security Bulletin: Vulnerabilities in libuser affect PowerKVM (CVE-2015-3245 and CVE-2015-3246)

Summary PowerKVM is affected by two vulnerabilities CVE-2015-3245 and CVE-2015-3246 in libuser. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-3245 DESCRIPTION: libuser is vulnerable to a denial of service, caused by the failure to properly filter out newline character...

Security Bulletin: PowerKVM is affected by two Qemu vulnerabilities

Summary PowerKVM is affected by two Qemu vulnerabilities. Vulnerability Details CVEID: CVE-2015-3214 DESCRIPTION: QEMU could allow a local attacker to execute arbitrary code on the system, caused by an out-of-bounds memory access in the pitioportread function. If QEMU PIT emulation is enabled, an...

Security Bulletin: PowerKVM is affected by Linux Kernel vulnerabilities (multiple CVEs)

Summary PowerKVM is affected by several Linux Kernel vulnerabilities multiple CVEs . Vulnerability Details CVEID: CVE-2015-2041 DESCRIPTION: Linux Kernel could allow a local attacker to obtain sensitive information, caused by an information leak in llc2timeouttable. An attacker could exploit this...

Security Bulletin: PowerKVM is affected by OpenSSL vulnerabilities (multiple CVEs)

Summary PowerKVM is affected by OpenSSL vulnerabilities multiple CVEs. Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an error when processing an ECParameters structure over a specially crafted binary polynomial field. A remote...

Security Bulletin: PowerKVM is affected by cups vulnerabilities (multiple CVEs)

Summary PowerKVM is affected by cups vulnerabilities multiple CVEs. Vulnerability Details CVEID: CVE-2014-9679 DESCRIPTION: CUPS is vulnerable to a buffer overflow, caused by an integer overflow in cupsRasterReadPixels. By persuading a victim to open a specially-crafted raster file, a remote...

Security Bulletin: PowerKVM is affected by a kexec-tools vulnerability (CVE-2015-0267)

Summary PowerKVM is affected by a kexec-tools vulnerability CVE-2015-0267. Vulnerability Details CVEID: CVE-2015-0267 DESCRIPTION: kexec-tools could allow a local attacker to launch a symlink attack. The script module-setup.sh creates temporary files insecurely. A local attacker could exploit thi...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects PowerKVM (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects PowerKVM. Vulnerability Details CVE Information: copy/paste-able; will update after page submission. Provided by system to make it easy to cut and paste data. CVEID: CVE-2015-4000 DESCRIPTION: T...

Security Bulletin: PowerKVM is affected by a qemu vulnerability (CVE-2014-9718)

Summary PowerKVM is affected by a qemu vulnerability. Vulnerability Details CVEID: CVE-2014-9718 DESCRIPTION: QEMU is vulnerable to a denial of service, caused by the failure to restrict malicious PRDT data from flowing from a guest to the host's IDE or AHCI controllers. A remote attacker could...

Security Bulletin: PowerKVM is affected by a bind vulnerability (CVE-2015-1349)

Summary PowerKVM is affected by bind vulnerability CVE-2015-1349. Vulnerability Details CVEID: CVE-2015-1349 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an error in the managed trust anchors on systems configured to perform DNSSEC validation and using managed-keys. By...

Security Bulletin: PowerKVM is affected by kernel vulnerabilities (Multiple CVEs)

Summary PowerKVM is affected by multiple kernel vulnerabilities. Vulnerability Details CVEID: CVE-2015-2041 DESCRIPTION: Linux Kernel could allow a local attacker to obtain sensitive information, caused by an information leak in llc2timeouttable. An attacker could exploit this vulnerability to le...