Skip to content
OpenAdvisories
High ELSA-2017-1681 1 CVE

Important: qemu-kvm security update (Oracle Linux 7)

Published Jul 5, 2017 · Updated Jul 5, 2017

Ecosystem: Oracle Linux

Summary

[1.5.3-126.el7_3.10]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1460179]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1460179]
- Resolves: bz#1460179
(CVE-2017-9524 qemu-kvm: Qemu: nbd: segmentation fault due to client non-negotiation [rhel-7.3.z])

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 qemu-img 10:1.5.3-126.el7_3.10
Oracle Linux · 7 qemu-kvm 10:1.5.3-126.el7_3.10
Oracle Linux · 7 qemu-kvm-common 10:1.5.3-126.el7_3.10
Oracle Linux · 7 qemu-kvm-tools 10:1.5.3-126.el7_3.10

Vulnerabilities 1

  • Unscored —
    CVE-2017-9524

    The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows…

    qemu Debian