Red Hat Security Advisory: rhev-hypervisor6 3.4.0 security, bug fix, and enhancement update
Updated rhev-hypervisor6 packages that fix multiple security issues, several bugs, and add various enhancements are now available. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
describes (18)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-0148US | medium5.5 | — | ||
Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block… | ||||
| CVE-2014-0147US | medium6.2 | — | ||
Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or… | ||||
| CVE-2014-0144US | high8.6 | — | ||
QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused… | ||||
| CVE-2013-4536US | high7.8 | — | ||
An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which… | ||||
| CVE-2013-4535US | high8.8 | — | ||
The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or v… | ||||
| CVE-2014-0146US | medium5.5 | — | ||
The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer dereference) via a crafted im… | ||||
| CVE-2014-0145US | high7.8 | — | ||
Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly execute arbitrary code via a large (1) L1 ta… | ||||
| CVE-2014-0143US | high7.0 | — | ||
Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted catalog size in (1) the paralle… | ||||
| CVE-2014-0142US | medium5.5 | — | ||
QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector functio… | ||||
| CVE-2014-3461US | medium6.8 | — | ||
hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks.… | ||||
| CVE-2014-0182US | high7.5 | — | ||
Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted config length… | ||||
| CVE-2013-6399US | high7.5 | — | ||
Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image. | ||||
| CVE-2013-4542US | high7.5 | — | ||
The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, which triggers a… | ||||
| CVE-2013-4541US | high7.5 | — | ||
The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setu… | ||||
| CVE-2013-4151US | high7.5 | — | ||
The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds w… | ||||
| CVE-2013-4148US | high7.5 | — | ||
Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm imag… | ||||
| CVE-2014-2894US | high7.2 | — | ||
Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE comm… | ||||
| CVE-2014-0150US | medium4.9 | — | ||
Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table u… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2014:0674self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1063182external
- 1066334external
- 1066342external
- 1066361external
- 1066382external
- 1066384external
remediations (18)
- Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674 - Fixedrhev-hypervisor6-0:6.5-20140603.2.el6ev.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2014:0674
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan