Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 526
Alerts This Week
Warning Icon 1 526

SUSE: 2018:2650-1 Moderate: kvm DoS Fix and Security Updates

suse
Calendar Grey September 7, 2018
Dist Suse Esm H88
SUSE has released a security update for kvm addressing several vulnerabilities of moderate severity affecting SLE 11-SP4.
An update that fixes three vulnerabilities is now available

Summary

This update for kvm fixes the following security issues: - CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket causing DoS (bsc#1098735) - CVE-2018-11806: Prevent heap-based buffer overflow via incoming fragmented datagrams (bsc#1096223) With this release the mitigations for Spectre v4 are moved the the patches from upstream (CVE-2018-3639, bsc#1092885). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-kvm-13771=1

Topics%20covered

Topics Covered

security advisory moderate update DoS fix SUSE kvm

References

#1092885 #1096223 #1098735

Cross- CVE-2018-11806 CVE-2018-12617 CVE-2018-3639

Affected Products:

SUSE Linux Enterprise Server 11-SP4

https://www.suse.com/security/cve/CVE-2018-11806.html

https://www.suse.com/security/cve/CVE-2018-12617.html

https://www.suse.com/security/cve/CVE-2018-3639.html

https://bugzilla.suse.com/1092885

https://bugzilla.suse.com/1096223

https://bugzilla.suse.com/1098735

Announcement ID: SUSE-SU-2018:2650-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update DoS fix SUSE kvm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.