Lucene search

K
suseSuseSUSE-SU-2015:0943-1
HistoryMay 26, 2015 - 2:07 p.m.

Security update for KVM (important)

2015-05-2614:07:13
lists.opensuse.org
11

0.001 Low

EPSS

Percentile

40.5%

KVM was updated to fix the following issues:

   * CVE-2015-3456: A buffer overflow in the floppy drive emulation,
     which could be used to carry out denial of service attacks or
     potential code execution against the host. This vulnerability is
     also known as VENOM.
   * Validate VMDK4 version field so we don't process versions we know
     nothing about. (bsc#834196)

Security Issues:

   * CVE-2015-3456
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456</a>&gt;