Skip to content
OpenAdvisories
Medium ELSA-2017-2445 1 CVE

Moderate: qemu-kvm security update (Oracle Linux 7)

Published Aug 9, 2017 · Updated Aug 9, 2017

Ecosystem: Oracle Linux

Summary

[1.5.3-141.el7_4.1]
- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
(CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 qemu-img 10:1.5.3-141.el7_4.1
Oracle Linux · 7 qemu-kvm 10:1.5.3-141.el7_4.1
Oracle Linux · 7 qemu-kvm-common 10:1.5.3-141.el7_4.1
Oracle Linux · 7 qemu-kvm-tools 10:1.5.3-141.el7_4.1

Vulnerabilities 1

  • Unscored —
    CVE-2017-10664

    qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of servi…

    qemu qemu Debian Ubuntu