Stay Secure with the Latest Linux Advisories

security advisorycriticaldebian

Debian: DSA-3088-1 Critical: Qemu-KVM Privilege Escalation

Paolo Bonzini of Red Hat discovered that the blit region checks were insufficient in the Cirrus VGA emulator in qemu-kvm, a full virtualization solution on x86 hardware. A privileged guest user could use this flaw to write into qemu address space on the host, potentially . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3088-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : qemu-kvm CVE ID : CVE-2014-8106 Paolo Bonzini of Red Hat discovered that the blit region checks were insufficient in the Cirrus VGA emulator in qemu-kvm, a full virtualization solution on x86 hardware. A privileged guest user could use this flaw to write into qemu address space on the host, potentially escalating their privileges to those of the qemu host process. For the stable distribution (wheezy), this problem has been fixed in version 1.1.2+dfsg-6+deb7u6. We recommend that you upgrade your qemu-kvm packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The Debian Security Advisory DSA-3089-1 pertains to a vulnerability found in the samba package for the stable branch.. Debian Security Advisory,qemu-kvm Update,Privileged Access,Hardware Virtualization. . Severity: Critical. LinuxSecurity.com Team

Dec 04, 2014 •Critical Debian