Oracle Linux 5 : kvm (ELSA-2010-0271)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0271 advisory. - Resolves: bz563465 EMBARGOED CVE-2010-0419 kvm: emulator privilege escalation segment selector check rhel-5.5 -...

CVE-2010-0430

libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor aka RHEV-H or rhev-hypervisor before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings...

CVE-2010-0430

CVE-2010-0430 affects libspice in QEMU-KVM used by Red Hat Enterprise Virtualization Hypervisor (RHEV-H) prior to 5.5-2.2. The flaw lets a guest OS user read from or write to arbitrary QEMU memory by manipulating the address Cairo uses for memory mappings. Impact is host-guest memory access compr...