Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

SciLinux SL6: SLSA-2018-0516-1 Moderate Qemu-KVM OOB Access Issue

Calendar Mar 14, 2018 • User Avatar LinuxSecurity Advisories
1 - 2 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory moderate x86_64 qemu Scientific Linux SL6 OOB access
Qemu: cirrus: OOB access issue in mode4and5 write functions (CVE-2017-15289) SL6 x86_64 qemu-guest-agent-0.12.1.2-2.503.el6_9.5.x86_64.rpm qemu-img-0.12.1.2-2.503.el6_9.5.x86_64.rpm qemu-kvm-0.12.1.2-2.503.el6_9.5.x86_64.rpm qemu-kvm-debuginfo-0.12.1.2-2.503.el6_9.5.x86_64.rpm qemu-kvm-tools-0.12.1.2-2.503.el6_9.5.x86_64.rpm i386 qemu-guest-agent-0.12.1.2-2.503.el6 [More...] 
Synopsis:          Moderate: qemu-kvm security update
Advisory ID:       SLSA-2018:0516-1
Issue Date:        2018-03-13
CVE Numbers:       CVE-2017-15289
--

Security Fix(es):

* Qemu: cirrus: OOB access issue in mode4and5 write functions
(CVE-2017-15289)
--

SL6
  x86_64
    qemu-guest-agent-0.12.1.2-2.503.el6_9.5.x86_64.rpm
    qemu-img-0.12.1.2-2.503.el6_9.5.x86_64.rpm
    qemu-kvm-0.12.1.2-2.503.el6_9.5.x86_64.rpm
    qemu-kvm-debuginfo-0.12.1.2-2.503.el6_9.5.x86_64.rpm
    qemu-kvm-tools-0.12.1.2-2.503.el6_9.5.x86_64.rpm
  i386
    qemu-guest-agent-0.12.1.2-2.503.el6_9.5.i686.rpm
    qemu-kvm-debuginfo-0.12.1.2-2.503.el6_9.5.i686.rpm

- Scientific Linux Development Team