(RHSA-2017:0352) Important: qemu-kvm security update

2017-03-0108:42:26

access.redhat.com

0.001 Low

EPSS

Percentile

51.1%

JSON

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process. (CVE-2017-2620)

OSVersionArchitecturePackageVersionFilename
RedHat6ppc64qemu-kvm-debuginfo< 0.12.1.2-2.491.el6_8.7qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.7.ppc64.rpm
RedHat6i686qemu-guest-agent< 0.12.1.2-2.491.el6_8.7qemu-guest-agent-0.12.1.2-2.491.el6_8.7.i686.rpm
RedHat6x86_64qemu-img< 0.12.1.2-2.491.el6_8.7qemu-img-0.12.1.2-2.491.el6_8.7.x86_64.rpm
RedHat6i686qemu-kvm-debuginfo< 0.12.1.2-2.491.el6_8.7qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.7.i686.rpm
RedHat6ppc64qemu-guest-agent< 0.12.1.2-2.491.el6_8.7qemu-guest-agent-0.12.1.2-2.491.el6_8.7.ppc64.rpm
RedHat6x86_64qemu-guest-agent< 0.12.1.2-2.491.el6_8.7qemu-guest-agent-0.12.1.2-2.491.el6_8.7.x86_64.rpm
RedHat6x86_64qemu-kvm-tools< 0.12.1.2-2.491.el6_8.7qemu-kvm-tools-0.12.1.2-2.491.el6_8.7.x86_64.rpm
RedHat6x86_64qemu-kvm< 0.12.1.2-2.491.el6_8.7qemu-kvm-0.12.1.2-2.491.el6_8.7.x86_64.rpm
RedHat6x86_64qemu-kvm-debuginfo< 0.12.1.2-2.491.el6_8.7qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.7.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	6	ppc64	qemu-kvm-debuginfo	< 0.12.1.2-2.491.el6_8.7	qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.7.ppc64.rpm
RedHat	6	i686	qemu-guest-agent	< 0.12.1.2-2.491.el6_8.7	qemu-guest-agent-0.12.1.2-2.491.el6_8.7.i686.rpm
RedHat	6	x86_64	qemu-img	< 0.12.1.2-2.491.el6_8.7	qemu-img-0.12.1.2-2.491.el6_8.7.x86_64.rpm
RedHat	6	i686	qemu-kvm-debuginfo	< 0.12.1.2-2.491.el6_8.7	qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.7.i686.rpm
RedHat	6	ppc64	qemu-guest-agent	< 0.12.1.2-2.491.el6_8.7	qemu-guest-agent-0.12.1.2-2.491.el6_8.7.ppc64.rpm
RedHat	6	x86_64	qemu-guest-agent	< 0.12.1.2-2.491.el6_8.7	qemu-guest-agent-0.12.1.2-2.491.el6_8.7.x86_64.rpm
RedHat	6	x86_64	qemu-kvm-tools	< 0.12.1.2-2.491.el6_8.7	qemu-kvm-tools-0.12.1.2-2.491.el6_8.7.x86_64.rpm
RedHat	6	x86_64	qemu-kvm	< 0.12.1.2-2.491.el6_8.7	qemu-kvm-0.12.1.2-2.491.el6_8.7.x86_64.rpm
RedHat	6	x86_64	qemu-kvm-debuginfo	< 0.12.1.2-2.491.el6_8.7	qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.7.x86_64.rpm