Lucene search

K
redhatRedHatRHSA-2017:2390
HistoryAug 01, 2017 - 3:24 p.m.

(RHSA-2017:2390) Moderate: qemu-kvm-rhev security update

2017-08-0115:24:44
access.redhat.com
19

0.034 Low

EPSS

Percentile

91.4%

KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.

Security Fix(es):

  • Quick Emulator (QEMU) built with the Network Block Device (NBD) Server support is vulnerable to a crash via a SIGPIPE signal. The crash can occur if a client aborts a connection due to any failure during negotiation or read operation. A remote user/process could use this flaw to crash the qemu-nbd server resulting in a DoS. (CVE-2017-10664)