Red Hat Security Advisory: qemu-kvm-rhev security update
Updated qemu-kvm-rhev packages that fix several security issues are now available for Red Hat Enterprise Linux OpenStack Platform 3.0. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-0148US | medium5.5 | — | ||
Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block… | ||||
| CVE-2014-0147US | medium6.2 | — | ||
Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or… | ||||
| CVE-2014-0144US | high8.6 | — | ||
QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused… | ||||
| CVE-2014-0146US | medium5.5 | — | ||
The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer dereference) via a crafted im… | ||||
| CVE-2014-0145US | high7.8 | — | ||
Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly execute arbitrary code via a large (1) L1 ta… | ||||
| CVE-2014-0143US | high7.0 | — | ||
Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted catalog size in (1) the paralle… | ||||
| CVE-2014-0142US | medium5.5 | — | ||
QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector functio… | ||||
| CVE-2014-0150US | medium4.9 | — | ||
Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table u… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2014:0435self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1078201external
- 1078212external
- 1078232external
- 1078846external
- 1078848external
- 1078885external
remediations (40)
- Fixedqemu-img-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-img-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-img-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-img-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-img-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-img-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-img-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-img-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.src as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.src as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.src as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.src as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.src as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.src as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.src as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.src as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-debuginfo-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-debuginfo-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-debuginfo-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-debuginfo-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-debuginfo-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-debuginfo-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-debuginfo-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-debuginfo-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-tools-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-tools-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-tools-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-tools-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-tools-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-tools-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-tools-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435 - Fixedqemu-kvm-rhev-tools-2:0.12.1.2-2.415.el6_5.8.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 3.0
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0435
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan