Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 602
Alerts This Week
Warning Icon 1 602

SUSE: 2018:3987-1 Moderate: KVM Buffer Overflow and DoS Issues

suse
Calendar Grey December 5, 2018
Dist Suse Esm H88
SUSE Security Patch for kvm addresses 7 security issues. Advisory rated as moderate threat, includes comprehensive guidelines.
An update that fixes 7 vulnerabilities is now available

Summary

This update for kvm fixes the following issues: Security issues fixed: - CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS (bsc#1110910). - CVE-2018-15746: Fixed qemu-seccomp.c that might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread (bsc#1106222). - CVE-2018-17958: Fixed a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used (bsc#1111006). - CVE-2018-17962: Fixed a Buffer Overflow in pcnet_receive in

Topics%20covered

Topics Covered

security advisory denial of service update buffer overflow SUSE Linux kvm

References

#1106222 #1110910 #1111006 #1111010 #1111013

#1112185 #1114422

Cross- CVE-2018-10839 CVE-2018-15746 CVE-2018-17958

CVE-2018-17962 CVE-2018-17963 CVE-2018-18438

CVE-2018-18849

Affected Products:

SUSE Linux Enterprise Server 11-SP3-LTSS

SUSE Linux Enterprise Point of Sale 11-SP3

https://www.suse.com/security/cve/CVE-2018-10839.html

https://www.suse.com/security/cve/CVE-2018-15746.html

https://www.suse.com/security/cve/CVE-2018-17958.html

https://www.suse.com/security/cve/CVE-2018-17962.html

https://www.suse.com/security/cve/CVE-2018-17963.html

https://www.suse.com/security/cve/CVE-2018-18438.html

https://www.suse.com/security/cve/CVE-2018-18849.html

https://bugzilla.suse.com/1106222

https://bugzilla.suse.com/1110910

Announcement ID: SUSE-SU-2018:3987-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory denial of service update buffer overflow SUSE Linux kvm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.