Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Fedora 22: 2016-38b20aa50f Critical Qemu Out Of Bounds Access

fedora
Calendar Grey March 19, 2016
Dist Fedora Esm H88
Important Fedora 22 patch available for xen targeting buffer overflow exploit in Qemu settings. Immediate response required!
Qemu: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714 (#1296080)

Summary

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

Update Information:

Qemu: nvram: OOB r/w access in processing firmware configurations CVE-2016-1714 (#1296080)

Topics%20covered

Topics Covered

security advisory fedora critical out of bounds firmware qemu nvram

Change Log

References


[ 1 ] Bug #1296060 - CVE-2016-1714 Qemu: nvram: OOB r/w access in processing firmware configurations https://bugzilla.redhat.com/show_bug.cgi?id=1296060 [ 2 ] Bug #1283934 - CVE-2016-1922 Qemu: i386: null pointer dereference in vapic_write() https://bugzilla.redhat.com/show_bug.cgi?id=1283934 [ 3 ] Bug #1284008 - CVE-2015-8613 Qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info https://bugzilla.redhat.com/show_bug.cgi?id=1284008 [ 4 ] Bug #1298570 - CVE-2016-1981 Qemu: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines https://bugzilla.redhat.com/show_bug.cgi?id=1298570 [ 5 ] Bug #1299455 - Qemu: usb ehci out-of-bounds read in ehci_process_itd https://bugzilla.redhat.com/show_bug.cgi?id=1299455 [ 6 ] Bug #1301643 - CVE-2016-2198 Qemu: usb: ehci null pointer dereference in ehci_caps_write https://bugzilla.redhat.com/show_bug.cgi?id=1301643 [ 7 ] Bug #1303106 - CVE-2016-2841 Qemu: net: ne2000...

Read the Full Advisory

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update xen' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: xen
Product: Fedora 22
Version: 4.5.2
Release: 9.fc22
URL: https://xenproject.org/
Summary: Xen is a virtual machine monitor

Topics%20covered

Topics Covered

security advisory fedora critical out of bounds firmware qemu nvram

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.