Skip to content
OpenAdvisories
Unscored RHSA-2015:1004 1 CVE

Red Hat Security Advisory: qemu-kvm-rhev security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · OpenStack 4 openstack:4::el6 qemu-img-rhev 2:0.12.1.2-2.448.el6_6.3
Red Hat · OpenStack 4 openstack:4::el6 qemu-kvm-rhev 2:0.12.1.2-2.448.el6_6.3
Red Hat · OpenStack 4 openstack:4::el6 qemu-kvm-rhev-debuginfo 2:0.12.1.2-2.448.el6_6.3
Red Hat · OpenStack 4 openstack:4::el6 qemu-kvm-rhev-tools 2:0.12.1.2-2.448.el6_6.3
Red Hat · OpenStack 5 openstack:5::el6 qemu-img-rhev 2:0.12.1.2-2.448.el6_6.3
Red Hat · OpenStack 5 openstack:5::el6 qemu-kvm-rhev 2:0.12.1.2-2.448.el6_6.3
Red Hat · OpenStack 5 openstack:5::el6 qemu-kvm-rhev-debuginfo 2:0.12.1.2-2.448.el6_6.3
Red Hat · OpenStack 5 openstack:5::el6 qemu-kvm-rhev-tools 2:0.12.1.2-2.448.el6_6.3
Red Hat · OpenStack 5 openstack:5::el7 libcacard-devel-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 5 openstack:5::el7 libcacard-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 5 openstack:5::el7 libcacard-tools-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 5 openstack:5::el7 qemu-img-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 5 openstack:5::el7 qemu-kvm-common-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 5 openstack:5::el7 qemu-kvm-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 5 openstack:5::el7 qemu-kvm-rhev-debuginfo 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 5 openstack:5::el7 qemu-kvm-tools-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 6 openstack:6::el7 libcacard-devel-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 6 openstack:6::el7 libcacard-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 6 openstack:6::el7 libcacard-tools-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 6 openstack:6::el7 qemu-img-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 6 openstack:6::el7 qemu-kvm-common-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 6 openstack:6::el7 qemu-kvm-rhev 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 6 openstack:6::el7 qemu-kvm-rhev-debuginfo 10:2.1.2-23.el7_1.3
Red Hat · OpenStack 6 openstack:6::el7 qemu-kvm-tools-rhev 10:2.1.2-23.el7_1.3

Vulnerabilities 1

  • Unscored —
    CVE-2015-3456 Public exploit EPSS 15%

    The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a…

    xen qemu virtualbox xen Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1218611
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1004.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-3456
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3456
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3456
  • article
    http://venom.crowdstrike.com/
  • article
    http://xenbits.xen.org/xsa/advisory-133.html
  • article
    https://access.redhat.com/articles/1444903
  • article
    https://securityblog.redhat.com/2015/05/13/venom-dont-get-bitten/