Skip to content
OpenAdvisories
Unscored RHSA-2015:1507 2 CVEs

Red Hat Security Advisory: qemu-kvm security and bug fix update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client libcacard 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::client libcacard-devel 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::client libcacard-tools 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::client qemu-img 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm-common 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm-debuginfo 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm-tools 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::computenode libcacard 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::computenode libcacard-devel 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::computenode libcacard-tools 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-img 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm-common 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm-debuginfo 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm-tools 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::server libcacard 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::server libcacard-devel 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::server libcacard-tools 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::server qemu-img 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-common 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-debuginfo 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-tools 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::workstation libcacard 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::workstation libcacard-devel 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::workstation libcacard-tools 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-img 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm-common 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm-debuginfo 10:1.5.3-86.el7_1.5
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm-tools 10:1.5.3-86.el7_1.5

Vulnerabilities 2

  • Unscored —
    CVE-2015-3214 Public exploit

    The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between rea…

    xen qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2015-5154

    Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDR…

    xen qemu xen qemu Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1229640
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1243563
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1507.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-3214
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-3214
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-3214
  • report
    https://access.redhat.com/security/cve/CVE-2015-5154
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5154
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5154