USN-2608-1: QEMU vulnerabilities

Jason Geffner discovered that QEMU incorrectly handled the virtual floppy driver. This issue is known as VENOM. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process. In the default installation, wh...

kvm security update

kvm-83-272.0.1.el5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83.272.el5 - kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch bz1219266 - Resolves: bz1219266 kvm: qemu: floppy disk controller flaw rhel-5.11.z...

Ubuntu 14.04 LTS : QEMU vulnerabilities (USN-2608-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2608-1 advisory. Jason Geffner discovered that QEMU incorrectly handled the virtual floppy driver. This issue is known as VENOM. A malicious guest could use this issue to...

PT-2015-7906

Name of the Vulnerable Software and Affected Versions netcf versions prior to 0.2.8 Description A denial of service flaw was found in netcf, where a specially crafted interface name could cause an application using netcf, such as the libvirt daemon, to crash. Recommendations For versions prior to...

Debian GNU/Linux Remote Compromise Protected Information

The multiple vulnerabilities in the libvirt package of the Debian GNU/Linux operating system may be exploited, leading to a violation of the accessibility of protected information. The exploitation of these vulnerabilities can be carried out by a malicious actor who has completed the authenticati...

CentOS Data Compromise

The vulnerability of the libvirt-devel-0.9.10 package on the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

CentOS Data Compromise

The vulnerability of the libvirt-python-0.9.10 package on the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

CentOS Data Compromise

The libvirt-debuginfo-0.10.2 package on the CentOS operating system has multiple vulnerabilities. Its operation may lead to violations of confidentiality, integrity, and accessibility of the protected information...

CentOS Data Compromise

The vulnerability of the libvirt-0.8.2 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

CentOS Data Compromise

The vulnerability of the libvirt-python-0.8.2 package on the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the libvirt-lock-sanlock-0.9.10 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

OpenSUSE Data Compromise

The multiple vulnerabilities in the libvirt-client-x86 package of the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

OpenSUSE Data Compromise

The vulnerability of the libvirt-client-32bit package of the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

OpenSUSE Data Compromise

The vulnerability of the libvirt-client-debuginfo package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

OpenSUSE Data Compromise

The vulnerability of the libvirt-client-debuginfo-32bit package on the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

OpenSUSE Data Compromise

The vulnerability of the libvirt-debuginfo package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

OpenSUSE Data Compromise

The vulnerability of the libvirt-devel package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the libvirt-devel-0.8.1 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the libvirt-devel-0.8.2 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

CentOS Data Compromise

The vulnerability of the libvirt-1.1.1 package on the CentOS operating system can lead to a violation of the confidentiality and accessibility of protected information. This vulnerability can be exploited remotely...