Skip to content
OpenAdvisories
High ELSA-2015-0999 1 CVE

Important: qemu-kvm security update (Oracle Linux 7)

Published May 13, 2015 · Updated May 13, 2015

Ecosystem: Oracle Linux

Summary

[1.5.3-86.el7_1.2]
- kvm-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch [bz#1219269]
- Resolves: bz#1219269
(EMBARGOED CVE-2015-3456 qemu-kvm: qemu: floppy disk controller flaw [rhel-7.1.z])

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 libcacard 10:1.5.3-86.el7_1.2
Oracle Linux · 7 libcacard-devel 10:1.5.3-86.el7_1.2
Oracle Linux · 7 libcacard-tools 10:1.5.3-86.el7_1.2
Oracle Linux · 7 qemu-img 10:1.5.3-86.el7_1.2
Oracle Linux · 7 qemu-kvm 10:1.5.3-86.el7_1.2
Oracle Linux · 7 qemu-kvm-common 10:1.5.3-86.el7_1.2
Oracle Linux · 7 qemu-kvm-tools 10:1.5.3-86.el7_1.2

Vulnerabilities 1

  • Unscored —
    CVE-2015-3456 Public exploit EPSS 15%

    The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a…

    xen qemu virtualbox xen Debian Ubuntu