Summary
[1.5.3-86.el7_1.6]
- kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248764]
- kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248764]
- kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248764]
- kvm-rtl8139-check-IP-Header-Length-field-CVE-2015-5165.patch [bz#1248764]
- kvm-rtl8139-check-IP-Total-Length-field-CVE-2015-5165.patch [bz#1248764]
- kvm-rtl8139-skip-offload-on-short-TCP-header-CVE-2015-51.patch [bz#1248764]
- kvm-rtl8139-check-TCP-Data-Offset-field-CVE-2015-5165.patch [bz#1248764]
- Resolves: bz#1248764
(CVE-2015-5165 qemu-kvm: Qemu: rtl8139 uninitialized heap memory information leakage to guest [rhel-7.1.z])
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libcacard | 10:1.5.3-86.el7_1.6 |
| Oracle Linux · 7 | libcacard-devel | 10:1.5.3-86.el7_1.6 |
| Oracle Linux · 7 | libcacard-tools | 10:1.5.3-86.el7_1.6 |
| Oracle Linux · 7 | qemu-img | 10:1.5.3-86.el7_1.6 |
| Oracle Linux · 7 | qemu-kvm | 10:1.5.3-86.el7_1.6 |
| Oracle Linux · 7 | qemu-kvm-common | 10:1.5.3-86.el7_1.6 |
| Oracle Linux · 7 | qemu-kvm-tools | 10:1.5.3-86.el7_1.6 |
Vulnerabilities 1
-
Unscored —CVE-2015-5165 EPSS 13%
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allow…