Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Scientific Linux: 2017-0621-1 Moderate: qemu-kvm Security Fix

Calendar Apr 05, 2017 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory moderate security fix integer overflow out-of-bounds qemu-kvm scientific linux
Moderate: qemu-kvm security and bug fix update 
Date: Wed, 5 Apr 2017 15:05:31 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: qemu-kvm on SL6.x i386/x86_64
MIME-Version: 1.0
Message-ID: <20170405150531.2526.35153@slpackages.fnal.gov>

Synopsis: Moderate: qemu-kvm security and bug fix update
Advisory ID: SLSA-2017:0621-1
Issue Date: 2017-03-21
CVE Numbers: CVE-2016-3712
--

Security Fix(es):

* An integer overflow flaw and an out-of-bounds read flaw were found in
the way QEMU's VGA emulator set certain VGA registers while in VBE mode. A
privileged guest user could use this flaw to crash the QEMU process
instance. (CVE-2016-3712)
--

SL6
 x86_64
 qemu-guest-agent-0.12.1.2-2.503.el6.x86_64.rpm
 qemu-img-0.12.1.2-2.503.el6.x86_64.rpm
 qemu-kvm-0.12.1.2-2.503.el6.x86_64.rpm
 qemu-kvm-debuginfo-0.12.1.2-2.503.el6.x86_64.rpm
 qemu-kvm-tools-0.12.1.2-2.503.el6.x86_64.rpm
 i386
 qemu-guest-agent-0.12.1.2-2.503.el6.i686.rpm
 qemu-kvm-debuginfo-0.12.1.2-2.503.el6.i686.rpm

- Scientific Linux Development Team