Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE: 2015:0943-1 Critical Warning: KVM Buffer Overflow Vulnerability

suse
Calendar Grey May 26, 2015
Scroller Suse
Important SUSE patch for KVM resolves significant buffer overflow issue affecting the security and reliability of server systems.
An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is ...

Summary

KVM was updated to fix the following issues: * CVE-2015-3456: A buffer overflow in the floppy drive emulation, which could be used to carry out denial of service attacks or potential code execution against the host. This vulnerability is also known as VENOM. * Validate VMDK4 version field so we don't process versions we know nothing about. (bsc#834196) Security Issues: * CVE-2015-3456 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP2 LTSS: zypper in -t patch slessp2-kvm=10682 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP2 LTSS (i586 x86_64):

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow important KVM SUSE Linux Server

References

#834196 #929339

Cross- CVE-2015-3456

Affected Products:

SUSE Linux Enterprise Server 11 SP2 LTSS

https://www.suse.com/security/cve/CVE-2015-3456.html

https://bugzilla.suse.com/834196

https://bugzilla.suse.com/929339

https://scc.suse.com:443/patches/

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2015:0943-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow important KVM SUSE Linux Server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.