Action not permitted
Modal body text goes here.
cve-2015-3214
Vulnerability from cvelistv5
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T05:39:31.960Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.lenovo.com/product_security/qemu" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://support.lenovo.com/us/en/product_security/qemu" }, { "name": "37990", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "url": "https://www.exploit-db.com/exploits/37990/" }, { "name": "GLSA-201510-02", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "https://security.gentoo.org/glsa/201510-02" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "name": "DSA-3348", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "http://www.debian.org/security/2015/dsa-3348" }, { "name": "RHSA-2015:1508", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1508.html" }, { "name": "RHSA-2015:1507", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1507.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "name": "RHSA-2015:1512", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1512.html" }, { "name": "1032598", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1032598" }, { "name": "75273", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/75273" }, { "name": "[oss-security] 20150625 Re: CVE request -- Linux kernel - kvm: x86: out-of-bounds memory access in pit_ioport_read function", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "http://www.openwall.com/lists/oss-security/2015/06/25/7" }, { "name": "[qemu-devel] 20150617 Re: [PATCH] i8254: fix out-of-bounds memory access in pit_ioport_read()", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2010-02-24T00:00:00", "descriptions": [ { "lang": "en", "value": "The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2022-01-26T13:58:33", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.lenovo.com/product_security/qemu" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://support.lenovo.com/us/en/product_security/qemu" }, { "name": "37990", "tags": [ "exploit", "x_refsource_EXPLOIT-DB" ], "url": "https://www.exploit-db.com/exploits/37990/" }, { "name": "GLSA-201510-02", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "https://security.gentoo.org/glsa/201510-02" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "name": "DSA-3348", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "http://www.debian.org/security/2015/dsa-3348" }, { "name": "RHSA-2015:1508", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1508.html" }, { "name": "RHSA-2015:1507", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1507.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "name": "RHSA-2015:1512", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1512.html" }, { "name": "1032598", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1032598" }, { "name": "75273", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/75273" }, { "name": "[oss-security] 20150625 Re: CVE request -- Linux kernel - kvm: x86: out-of-bounds memory access in pit_ioport_read function", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "http://www.openwall.com/lists/oss-security/2015/06/25/7" }, { "name": "[qemu-devel] 20150617 Re: [PATCH] i8254: fix out-of-bounds memory access in pit_ioport_read()", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13" } ] } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2015-3214", "datePublished": "2015-08-31T10:00:00", "dateReserved": "2015-04-10T00:00:00", "dateUpdated": "2024-08-06T05:39:31.960Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2015-3214\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2015-08-31T10:59:07.580\",\"lastModified\":\"2023-02-13T00:48:24.553\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad en pit_ioport_read en i8254.c en el kernel de Linux en versiones anteriores a 2.6.33 y en QEMU en versiones anteriores a 2.3.1, no distingue entre longitudes de lectura y longitudes de escritura, lo que podr\u00eda permitir a los usuarios invitados del SO ejecutar c\u00f3digo arbitrario en el host del SO desencadenando el uso de un \u00edndice no v\u00e1lido.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:M/Au:N/C:C/I:C/A:C\",\"accessVector\":\"LOCAL\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\",\"baseScore\":6.9},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.4,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.3.0\",\"matchCriteriaId\":\"ABF17A18-4BE8-41B7-B50C-F4A137B3B2F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.6.32\",\"matchCriteriaId\":\"4367A8B9-ABB9-4E4E-9A2A-85719CBE8DAC\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:4.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDDF9823-D999-41A4-BB7B-A63C00ACE11B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:4.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51F7426A-46F7-4BE0-806F-F4598C8B0426\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:4.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7F71EBA-27AC-464B-8708-4E8971BC75A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:arista:eos:4.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8705CF80-DEFC-4425-8E23-D98FFD678157\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16F59A04-14CF-49E2-9973-645477EA09DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:emc_px12-400r_ivx:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.0.10.33264\",\"matchCriteriaId\":\"19E383C6-5DB4-4D42-BC8E-70CEA527FAEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:emc_px12-450r_ivx:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.0.10.33264\",\"matchCriteriaId\":\"811FD71F-FC60-478B-B257-A7019AE6F88A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B152EDF3-3140-4343-802F-F4F1C329F5C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31EC146C-A6F6-4C0D-AF87-685286262DAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D86166F9-BBF0-4650-8CCD-0F9C97104D21\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9835B192-FE11-4FB6-B1D8-C47530A46014\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19F5A4C6-E90F-4B33-8B28-D57FC36E3866\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39E542B7-500F-4B9E-B712-886C593525E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9F97AEB-F4DB-4F1F-A69C-5EF8CBBFAFE6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0C69E57-48DE-467F-8ADD-B4601CE1611E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"35A9FD70-E9CA-43AF-A453-E41EAB430E7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"742A198F-D40F-4B32-BB9C-C5EF5B09C3E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CDCFF34-6F1D-45A1-BE37-6A0E17B04801\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.1_ppc64:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B6ED0AA-CD87-47A5-8E82-C9C7BD14F1AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.2_ppc64:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E5B5F9E-D749-45E5-8538-7CED9620C00C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.3_ppc64:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"188019BF-3700-4B3F-BFA5-553B2B545B7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B8B2E32-B838-4E51-BAA2-764089D2A684\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4319B943-7B19-468D-A160-5895F7F997A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39C1ABF5-4070-4AA7-BAB8-4F63E1BD91FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8036E2AE-4E44-4FA5-AFFB-A3724BFDD654\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37CE1DC7-72C5-483C-8921-0B462C8284D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"98381E61-F082-4302-B51F-5648884F998B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D99A687E-EAE6-417E-A88E-D0082BC194CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B353CE99-D57C-465B-AAB0-73EF581127D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7431ABC1-9252-419E-8CC1-311B41360078\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E8CD4EF-DC90-40BB-A721-6EC087507906\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44B067C7-735E-43C9-9188-7E1522A02491\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8442C20-41F9-47FD-9A12-E724D3A31FD7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF77CDCF-B9C9-427D-B2BF-36650FB2148C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21690BAC-2129-4A33-9B48-1F3BF30072A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F732C7C9-A9CC-4DEF-A8BE-D0F18C944C78\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17F256A9-D3B9-4C72-B013-4EFD878BFEA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"55DF5F02-550E-41E0-86A3-862F2785270C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA5F8426-5EEB-4013-BE49-8E705DA140B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C7E9628-0915-4C49-8929-F5E060A20CBB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C450C83-695F-4408-8B4F-0E7D6DDAE345\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3707B08D-8A78-48CB-914C-33A753D13FC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}],\"references\":[{\"url\":\"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1507.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1508.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2015-1512.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2015/dsa-3348\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2015/06/25/7\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\"]},{\"url\":\"http://www.securityfocus.com/bid/75273\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032598\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1229640\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201510-02\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://support.lenovo.com/product_security/qemu\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.lenovo.com/us/en/product_security/qemu\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.exploit-db.com/exploits/37990/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html\",\"source\":\"secalert@redhat.com\"}]}}" } }
var-201508-0166
Vulnerability from variot
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index. QEMU is prone to a memory-corruption vulnerability because it fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code on the host with the privileges of the hosting QEMU process. Failed exploit attempts may result in a denial-of-service condition. The Linux kernel is the kernel used by the open source operating system Linux released by the American Linux Foundation. The NFSv4 implementation is one of the distributed file system protocols. QEMU (also known as Quick Emulator) is a set of analog processor software developed by French programmer Fabrice Bellard. The software has the characteristics of fast speed and cross-platform. There is a security vulnerability in the 'pit_ioport_read' function in the i8254.c file of Linux kernel 2.6.32 and earlier versions and QEMU 2.3.0 and earlier versions. The vulnerability is due to the fact that the program does not distinguish between read length and write length. Relevant releases/architectures:
RHEV-H and VDSM for 7 Hosts - x86_64
- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
===================================================================== Red Hat Security Advisory
Synopsis: Important: qemu-kvm security and bug fix update Advisory ID: RHSA-2015:1507-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2015-1507.html Issue date: 2015-07-27 CVE Names: CVE-2015-3214 CVE-2015-5154 =====================================================================
- Summary:
Updated qemu-kvm packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64
- Description:
KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm package provides the user-space component for running virtual machines using KVM.
A heap buffer overflow flaw was found in the way QEMU's IDE subsystem handled I/O buffer access while processing certain ATAPI commands. (CVE-2015-5154)
An out-of-bounds memory access flaw, leading to memory corruption or possibly an information leak, was found in QEMU's pit_ioport_read() function. (CVE-2015-3214)
Red Hat would like to thank Matt Tait of Google's Project Zero security team for reporting the CVE-2015-3214 issue. The CVE-2015-5154 issue was discovered by Kevin Wolf of Red Hat.
This update also fixes the following bug:
- Due to an incorrect implementation of portable memory barriers, the QEMU emulator in some cases terminated unexpectedly when a virtual disk was under heavy I/O load. This update fixes the implementation in order to achieve correct synchronization between QEMU's threads. As a result, the described crash no longer occurs. (BZ#1233643)
All qemu-kvm users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
- Solution:
Before applying this update, make sure all previously released errata relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
- Bugs fixed (https://bugzilla.redhat.com/):
1229640 - CVE-2015-3214 qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function 1243563 - CVE-2015-5154 qemu: ide: atapi: heap overflow during I/O buffer memory access
- Package List:
Red Hat Enterprise Linux Client (v. 7):
Source: qemu-kvm-1.5.3-86.el7_1.5.src.rpm
x86_64: libcacard-1.5.3-86.el7_1.5.i686.rpm libcacard-1.5.3-86.el7_1.5.x86_64.rpm qemu-img-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-common-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-tools-1.5.3-86.el7_1.5.x86_64.rpm
Red Hat Enterprise Linux Client Optional (v. 7):
x86_64: libcacard-devel-1.5.3-86.el7_1.5.i686.rpm libcacard-devel-1.5.3-86.el7_1.5.x86_64.rpm libcacard-tools-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm
Red Hat Enterprise Linux ComputeNode Optional (v. 7):
Source: qemu-kvm-1.5.3-86.el7_1.5.src.rpm
x86_64: libcacard-1.5.3-86.el7_1.5.i686.rpm libcacard-1.5.3-86.el7_1.5.x86_64.rpm libcacard-devel-1.5.3-86.el7_1.5.i686.rpm libcacard-devel-1.5.3-86.el7_1.5.x86_64.rpm libcacard-tools-1.5.3-86.el7_1.5.x86_64.rpm qemu-img-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-common-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-tools-1.5.3-86.el7_1.5.x86_64.rpm
Red Hat Enterprise Linux Server (v. 7):
Source: qemu-kvm-1.5.3-86.el7_1.5.src.rpm
ppc64: qemu-img-1.5.3-86.el7_1.5.ppc64.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.ppc64.rpm
x86_64: libcacard-1.5.3-86.el7_1.5.i686.rpm libcacard-1.5.3-86.el7_1.5.x86_64.rpm qemu-img-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-common-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-tools-1.5.3-86.el7_1.5.x86_64.rpm
Red Hat Enterprise Linux Server Optional (v. 7):
ppc64: libcacard-1.5.3-86.el7_1.5.ppc.rpm libcacard-1.5.3-86.el7_1.5.ppc64.rpm libcacard-devel-1.5.3-86.el7_1.5.ppc.rpm libcacard-devel-1.5.3-86.el7_1.5.ppc64.rpm libcacard-tools-1.5.3-86.el7_1.5.ppc64.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.ppc.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.ppc64.rpm
x86_64: libcacard-devel-1.5.3-86.el7_1.5.i686.rpm libcacard-devel-1.5.3-86.el7_1.5.x86_64.rpm libcacard-tools-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm
Red Hat Enterprise Linux Workstation (v. 7):
Source: qemu-kvm-1.5.3-86.el7_1.5.src.rpm
x86_64: libcacard-1.5.3-86.el7_1.5.i686.rpm libcacard-1.5.3-86.el7_1.5.x86_64.rpm qemu-img-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-common-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-tools-1.5.3-86.el7_1.5.x86_64.rpm
Red Hat Enterprise Linux Workstation Optional (v. 7):
x86_64: libcacard-devel-1.5.3-86.el7_1.5.i686.rpm libcacard-devel-1.5.3-86.el7_1.5.x86_64.rpm libcacard-tools-1.5.3-86.el7_1.5.x86_64.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm qemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2015-3214 https://access.redhat.com/security/cve/CVE-2015-5154 https://access.redhat.com/security/updates/classification/#important
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iD8DBQFVtjQAXlSAg2UNWIIRAubOAJ9jPmZf7ZF+FHd+a7JxYxxRPAGx0wCgv5dX hlTFJ96W8Yn4W+ZR2yhsbBU= =i68a -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . ============================================================================ Ubuntu Security Notice USN-2692-1 July 28, 2015
qemu vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 15.04
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in QEMU. In the default installation, when QEMU is used with libvirt, attackers would be isolated by the libvirt AppArmor profile. In the default installation, when QEMU is used with libvirt, attackers would be isolated by the libvirt AppArmor profile. (CVE-2015-5154)
Zhu Donghai discovered that QEMU incorrectly handled the SCSI driver. In the default installation, when QEMU is used with libvirt, attackers would be isolated by the libvirt AppArmor profile. This issue only affected Ubuntu 15.04. (CVE-2015-5158)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 15.04: qemu-system 1:2.2+dfsg-5expubuntu9.3 qemu-system-aarch64 1:2.2+dfsg-5expubuntu9.3 qemu-system-arm 1:2.2+dfsg-5expubuntu9.3 qemu-system-mips 1:2.2+dfsg-5expubuntu9.3 qemu-system-misc 1:2.2+dfsg-5expubuntu9.3 qemu-system-ppc 1:2.2+dfsg-5expubuntu9.3 qemu-system-sparc 1:2.2+dfsg-5expubuntu9.3 qemu-system-x86 1:2.2+dfsg-5expubuntu9.3
Ubuntu 14.04 LTS: qemu-system 2.0.0+dfsg-2ubuntu1.15 qemu-system-aarch64 2.0.0+dfsg-2ubuntu1.15 qemu-system-arm 2.0.0+dfsg-2ubuntu1.15 qemu-system-mips 2.0.0+dfsg-2ubuntu1.15 qemu-system-misc 2.0.0+dfsg-2ubuntu1.15 qemu-system-ppc 2.0.0+dfsg-2ubuntu1.15 qemu-system-sparc 2.0.0+dfsg-2ubuntu1.15 qemu-system-x86 2.0.0+dfsg-2ubuntu1.15
After a standard system update you need to restart all QEMU virtual machines to make all the necessary changes.
CVE-2015-5165
Donghai Zhu discovered that the QEMU model of the RTL8139 network
card did not sufficiently validate inputs in the C+ mode offload
emulation, allowing a malicious guest to read uninitialized memory
from the QEMU process's heap.
CVE-2015-5225
Mr Qinghao Tang from QIHU 360 Inc.
For the oldstable distribution (wheezy), these problems have been fixed in version 1.1.2+dfsg-6a+deb7u9. The oldstable distribution is only affected by CVE-2015-5165 and CVE-2015-5745.
For the stable distribution (jessie), these problems have been fixed in version 1:2.1+dfsg-12+deb8u2.
For the unstable distribution (sid), these problems have been fixed in version 1:2.4+dfsg-1a.
We recommend that you upgrade your qemu packages. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201510-02
https://security.gentoo.org/
Severity: Normal Title: QEMU: Arbitrary code execution Date: October 31, 2015 Bugs: #551752, #555680, #556050, #556052 ID: 201510-02
Synopsis
A heap-based buffer overflow in QEMU could result in execution of arbitrary code.
Affected packages
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 app-emulation/qemu < 2.3.0-r4 >= 2.3.0-r4
Description
Heap-based buffer overflow has been found in QEMU's PCNET controller.
Workaround
There is no known workaround at this time.
Resolution
All QEMU users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.3.0-r4"
References
[ 1 ] CVE-2015-3209 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3209 [ 2 ] CVE-2015-3214 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3214 [ 3 ] CVE-2015-5154 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5154 [ 4 ] CVE-2015-5158 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5158
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/201510-02
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2015 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201508-0166", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "eos", "scope": "eq", "trust": 1.0, "vendor": "arista", "version": "4.14" }, { "model": "enterprise linux for power big endian eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.4_ppc64" }, { "model": "openstack", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "5.0" }, { "model": "enterprise linux server from rhui", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.0" }, { "model": "enterprise linux for scientific computing", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.0" }, { "model": "enterprise linux server eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.5" }, { "model": "linux", "scope": "eq", "trust": 1.0, "vendor": "debian", "version": "7.0" }, { "model": "virtualization", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "3.0" }, { "model": "enterprise linux compute node eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.5" }, { "model": "enterprise linux server eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.7" }, { "model": "enterprise linux server eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.3" }, { "model": "enterprise linux server aus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.7" }, { "model": "enterprise linux compute node eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.7" }, { "model": "enterprise linux server aus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.3" }, { "model": "enterprise linux compute node eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.3" }, { "model": "enterprise linux server update services for sap solutions", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.2" }, { "model": "enterprise linux server eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.6" }, { "model": "enterprise linux for power big endian eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.3_ppc64" }, { "model": "enterprise linux server aus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.6" }, { "model": "enterprise linux compute node eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.6" }, { "model": "enterprise linux for power big endian eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.1_ppc64" }, { "model": "eos", "scope": "eq", "trust": 1.0, "vendor": "arista", "version": "4.12" }, { "model": "enterprise linux server eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.1" }, { "model": "enterprise linux server eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.4" }, { "model": "enterprise linux compute node eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.1" }, { "model": "kernel", "scope": "lte", "trust": 1.0, "vendor": "linux", "version": "2.6.32" }, { "model": "enterprise linux server aus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.4" }, { "model": "enterprise linux compute node eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.4" }, { "model": "eos", "scope": "eq", "trust": 1.0, "vendor": "arista", "version": "4.15" }, { "model": "enterprise linux server tus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.7" }, { "model": "enterprise linux for power big endian eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.2_ppc64" }, { "model": "enterprise linux server tus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.3" }, { "model": "enterprise linux server update services for sap solutions", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.7" }, { "model": "enterprise linux server tus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.6" }, { "model": "enterprise linux server update services for sap solutions", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.3" }, { "model": "enterprise linux for power big endian eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.6_ppc64" }, { "model": "linux", "scope": "eq", "trust": 1.0, "vendor": "debian", "version": "8.0" }, { "model": "enterprise linux server update services for sap solutions", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.6" }, { "model": "emc px12-400r ivx", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "1.0.10.33264" }, { "model": "emc px12-450r ivx", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "1.0.10.33264" }, { "model": "enterprise linux server eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.2" }, { "model": "enterprise linux compute node eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.2" }, { "model": "qemu", "scope": "lte", "trust": 1.0, "vendor": "qemu", "version": "2.3.0" }, { "model": "enterprise linux for power big endian", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.0" }, { "model": "enterprise linux server update services for sap solutions", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.4" }, { "model": "openstack", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "6.0" }, { "model": "eos", "scope": "eq", "trust": 1.0, "vendor": "arista", "version": "4.13" }, { "model": "enterprise linux for power big endian eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.7_ppc64" }, { "model": "enterprise linux for power big endian eus", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.5_ppc64" }, { "model": "enterprise linux server", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.0" }, { "model": "enterprise linux workstation", "scope": "eq", "trust": 1.0, "vendor": "redhat", "version": "7.0" }, { "model": "qemu", "scope": "lt", "trust": 0.8, "vendor": "fabrice bellard", "version": "2.3.1" }, { "model": "kernel", "scope": "lt", "trust": 0.8, "vendor": "linux", "version": "2.6.33" }, { "model": "kernel", "scope": "eq", "trust": 0.6, "vendor": "linux", "version": "2.6.32" }, { "model": "linux", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "15.04" }, { "model": "linux lts", "scope": "eq", "trust": 0.3, "vendor": "ubuntu", "version": "14.04" }, { "model": "enterprise virtualization hypervisor", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "7" }, { "model": "enterprise linux workstation", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "7" }, { "model": "enterprise linux server", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "7" }, { "model": "enterprise linux hpc node", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "7" }, { "model": "enterprise linux desktop", "scope": "eq", "trust": 0.3, "vendor": "redhat", "version": "7" }, { "model": "qemu", "scope": "eq", "trust": 0.3, "vendor": "qemu", "version": "0" }, { "model": "enterprise linux", "scope": "eq", "trust": 0.3, "vendor": "oracle", "version": "7" }, { "model": "powerkvm", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "2.1" }, { "model": "linux", "scope": null, "trust": 0.3, "vendor": "gentoo", "version": null }, { "model": "linux sparc", "scope": "eq", "trust": 0.3, "vendor": "debian", "version": "6.0" }, { "model": "linux s/390", "scope": "eq", "trust": 0.3, "vendor": "debian", "version": "6.0" }, { "model": "linux powerpc", "scope": "eq", "trust": 0.3, "vendor": "debian", "version": "6.0" }, { "model": "linux mips", "scope": "eq", "trust": 0.3, "vendor": "debian", "version": "6.0" }, { "model": "linux ia-64", "scope": "eq", "trust": 0.3, "vendor": "debian", "version": "6.0" }, { "model": "linux ia-32", "scope": "eq", "trust": 0.3, "vendor": "debian", "version": "6.0" }, { "model": "linux arm", "scope": "eq", "trust": 0.3, "vendor": "debian", "version": "6.0" }, { "model": "linux amd64", "scope": "eq", "trust": 0.3, "vendor": "debian", "version": "6.0" }, { "model": "centos", "scope": "eq", "trust": 0.3, "vendor": "centos", "version": "7" }, { "model": "powerkvm build", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "2.1.158" } ], "sources": [ { "db": "BID", "id": "75273" }, { "db": "JVNDB", "id": "JVNDB-2015-004512" }, { "db": "NVD", "id": "CVE-2015-3214" }, { "db": "CNNVD", "id": "CNNVD-201506-371" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "2.6.32", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "2.3.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:arista:eos:4.15:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:arista:eos:4.14:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:arista:eos:4.13:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:arista:eos:4.12:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:lenovo:emc_px12-450r_ivx:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "1.0.10.33264", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:lenovo:emc_px12-400r_ivx:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "1.0.10.33264", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.1_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.2_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.3_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2015-3214" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Matt Tait of Google\u0027s Project Zero.", "sources": [ { "db": "BID", "id": "75273" }, { "db": "CNNVD", "id": "CNNVD-201506-371" } ], "trust": 0.9 }, "cve": "CVE-2015-3214", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "author": "NVD", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 3.4, "impactScore": 10.0, "integrityImpact": "COMPLETE", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Medium", "accessVector": "Local", "authentication": "None", "author": "NVD", "availabilityImpact": "Complete", "baseScore": 6.9, "confidentialityImpact": "Complete", "exploitabilityScore": null, "id": "CVE-2015-3214", "impactScore": null, "integrityImpact": "Complete", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "Medium", "trust": 0.9, "userInteractionRequired": null, "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 3.4, "id": "VHN-81175", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "MEDIUM", "trust": 0.1, "vectorString": "AV:L/AC:M/AU:N/C:C/I:C/A:C", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "NVD", "id": "CVE-2015-3214", "trust": 1.8, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-201506-371", "trust": 0.6, "value": "MEDIUM" }, { "author": "VULHUB", "id": "VHN-81175", "trust": 0.1, "value": "MEDIUM" }, { "author": "VULMON", "id": "CVE-2015-3214", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "VULHUB", "id": "VHN-81175" }, { "db": "VULMON", "id": "CVE-2015-3214" }, { "db": "JVNDB", "id": "JVNDB-2015-004512" }, { "db": "NVD", "id": "CVE-2015-3214" }, { "db": "CNNVD", "id": "CNNVD-201506-371" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index. QEMU is prone to a memory-corruption vulnerability because it fails to perform adequate boundary-checks on user-supplied data. \nAn attacker can exploit this issue to execute arbitrary code on the host with the privileges of the hosting QEMU process. Failed exploit attempts may result in a denial-of-service condition. The Linux kernel is the kernel used by the open source operating system Linux released by the American Linux Foundation. The NFSv4 implementation is one of the distributed file system protocols. QEMU (also known as Quick Emulator) is a set of analog processor software developed by French programmer Fabrice Bellard. The software has the characteristics of fast speed and cross-platform. There is a security vulnerability in the \u0027pit_ioport_read\u0027 function in the i8254.c file of Linux kernel 2.6.32 and earlier versions and QEMU 2.3.0 and earlier versions. The vulnerability is due to the fact that the program does not distinguish between read length and write length. Relevant releases/architectures:\n\nRHEV-H and VDSM for 7 Hosts - x86_64\n\n3. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n Red Hat Security Advisory\n\nSynopsis: Important: qemu-kvm security and bug fix update\nAdvisory ID: RHSA-2015:1507-01\nProduct: Red Hat Enterprise Linux\nAdvisory URL: https://rhn.redhat.com/errata/RHSA-2015-1507.html\nIssue date: 2015-07-27\nCVE Names: CVE-2015-3214 CVE-2015-5154 \n=====================================================================\n\n1. Summary:\n\nUpdated qemu-kvm packages that fix two security issues and one bug are now\navailable for Red Hat Enterprise Linux 7. \n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Client (v. 7) - x86_64\nRed Hat Enterprise Linux Client Optional (v. 7) - x86_64\nRed Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64\nRed Hat Enterprise Linux Server (v. 7) - ppc64, x86_64\nRed Hat Enterprise Linux Server Optional (v. 7) - ppc64, x86_64\nRed Hat Enterprise Linux Workstation (v. 7) - x86_64\nRed Hat Enterprise Linux Workstation Optional (v. 7) - x86_64\n\n3. Description:\n\nKVM (Kernel-based Virtual Machine) is a full virtualization solution for\nLinux on AMD64 and Intel 64 systems. The qemu-kvm package provides the\nuser-space component for running virtual machines using KVM. \n\nA heap buffer overflow flaw was found in the way QEMU\u0027s IDE subsystem\nhandled I/O buffer access while processing certain ATAPI commands. \n(CVE-2015-5154)\n\nAn out-of-bounds memory access flaw, leading to memory corruption or\npossibly an information leak, was found in QEMU\u0027s pit_ioport_read()\nfunction. (CVE-2015-3214)\n\nRed Hat would like to thank Matt Tait of Google\u0027s Project Zero security\nteam for reporting the CVE-2015-3214 issue. The CVE-2015-5154 issue was\ndiscovered by Kevin Wolf of Red Hat. \n\nThis update also fixes the following bug:\n\n* Due to an incorrect implementation of portable memory barriers, the QEMU\nemulator in some cases terminated unexpectedly when a virtual disk was\nunder heavy I/O load. This update fixes the implementation in order to\nachieve correct synchronization between QEMU\u0027s threads. As a result, the\ndescribed crash no longer occurs. (BZ#1233643)\n\nAll qemu-kvm users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. After installing this\nupdate, shut down all running virtual machines. Once all virtual machines\nhave shut down, start them again for this update to take effect. \n\n4. Solution:\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied. \n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1229640 - CVE-2015-3214 qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function\n1243563 - CVE-2015-5154 qemu: ide: atapi: heap overflow during I/O buffer memory access\n\n6. Package List:\n\nRed Hat Enterprise Linux Client (v. 7):\n\nSource:\nqemu-kvm-1.5.3-86.el7_1.5.src.rpm\n\nx86_64:\nlibcacard-1.5.3-86.el7_1.5.i686.rpm\nlibcacard-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-img-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-common-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-tools-1.5.3-86.el7_1.5.x86_64.rpm\n\nRed Hat Enterprise Linux Client Optional (v. 7):\n\nx86_64:\nlibcacard-devel-1.5.3-86.el7_1.5.i686.rpm\nlibcacard-devel-1.5.3-86.el7_1.5.x86_64.rpm\nlibcacard-tools-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm\n\nRed Hat Enterprise Linux ComputeNode Optional (v. 7):\n\nSource:\nqemu-kvm-1.5.3-86.el7_1.5.src.rpm\n\nx86_64:\nlibcacard-1.5.3-86.el7_1.5.i686.rpm\nlibcacard-1.5.3-86.el7_1.5.x86_64.rpm\nlibcacard-devel-1.5.3-86.el7_1.5.i686.rpm\nlibcacard-devel-1.5.3-86.el7_1.5.x86_64.rpm\nlibcacard-tools-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-img-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-common-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-tools-1.5.3-86.el7_1.5.x86_64.rpm\n\nRed Hat Enterprise Linux Server (v. 7):\n\nSource:\nqemu-kvm-1.5.3-86.el7_1.5.src.rpm\n\nppc64:\nqemu-img-1.5.3-86.el7_1.5.ppc64.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.ppc64.rpm\n\nx86_64:\nlibcacard-1.5.3-86.el7_1.5.i686.rpm\nlibcacard-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-img-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-common-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-tools-1.5.3-86.el7_1.5.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional (v. 7):\n\nppc64:\nlibcacard-1.5.3-86.el7_1.5.ppc.rpm\nlibcacard-1.5.3-86.el7_1.5.ppc64.rpm\nlibcacard-devel-1.5.3-86.el7_1.5.ppc.rpm\nlibcacard-devel-1.5.3-86.el7_1.5.ppc64.rpm\nlibcacard-tools-1.5.3-86.el7_1.5.ppc64.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.ppc.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.ppc64.rpm\n\nx86_64:\nlibcacard-devel-1.5.3-86.el7_1.5.i686.rpm\nlibcacard-devel-1.5.3-86.el7_1.5.x86_64.rpm\nlibcacard-tools-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nqemu-kvm-1.5.3-86.el7_1.5.src.rpm\n\nx86_64:\nlibcacard-1.5.3-86.el7_1.5.i686.rpm\nlibcacard-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-img-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-common-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-tools-1.5.3-86.el7_1.5.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation Optional (v. 7):\n\nx86_64:\nlibcacard-devel-1.5.3-86.el7_1.5.i686.rpm\nlibcacard-devel-1.5.3-86.el7_1.5.x86_64.rpm\nlibcacard-tools-1.5.3-86.el7_1.5.x86_64.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.i686.rpm\nqemu-kvm-debuginfo-1.5.3-86.el7_1.5.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2015-3214\nhttps://access.redhat.com/security/cve/CVE-2015-5154\nhttps://access.redhat.com/security/updates/classification/#important\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2015 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niD8DBQFVtjQAXlSAg2UNWIIRAubOAJ9jPmZf7ZF+FHd+a7JxYxxRPAGx0wCgv5dX\nhlTFJ96W8Yn4W+ZR2yhsbBU=\n=i68a\n-----END PGP SIGNATURE-----\n\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. ============================================================================\nUbuntu Security Notice USN-2692-1\nJuly 28, 2015\n\nqemu vulnerabilities\n============================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 15.04\n- Ubuntu 14.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in QEMU. In the default installation, when QEMU is\nused with libvirt, attackers would be isolated by the libvirt AppArmor\nprofile. In the default installation, when QEMU is used with\nlibvirt, attackers would be isolated by the libvirt AppArmor profile. \n(CVE-2015-5154)\n\nZhu Donghai discovered that QEMU incorrectly handled the SCSI driver. In the default installation, when QEMU is used with libvirt,\nattackers would be isolated by the libvirt AppArmor profile. This issue\nonly affected Ubuntu 15.04. (CVE-2015-5158)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 15.04:\n qemu-system 1:2.2+dfsg-5expubuntu9.3\n qemu-system-aarch64 1:2.2+dfsg-5expubuntu9.3\n qemu-system-arm 1:2.2+dfsg-5expubuntu9.3\n qemu-system-mips 1:2.2+dfsg-5expubuntu9.3\n qemu-system-misc 1:2.2+dfsg-5expubuntu9.3\n qemu-system-ppc 1:2.2+dfsg-5expubuntu9.3\n qemu-system-sparc 1:2.2+dfsg-5expubuntu9.3\n qemu-system-x86 1:2.2+dfsg-5expubuntu9.3\n\nUbuntu 14.04 LTS:\n qemu-system 2.0.0+dfsg-2ubuntu1.15\n qemu-system-aarch64 2.0.0+dfsg-2ubuntu1.15\n qemu-system-arm 2.0.0+dfsg-2ubuntu1.15\n qemu-system-mips 2.0.0+dfsg-2ubuntu1.15\n qemu-system-misc 2.0.0+dfsg-2ubuntu1.15\n qemu-system-ppc 2.0.0+dfsg-2ubuntu1.15\n qemu-system-sparc 2.0.0+dfsg-2ubuntu1.15\n qemu-system-x86 2.0.0+dfsg-2ubuntu1.15\n\nAfter a standard system update you need to restart all QEMU virtual\nmachines to make all the necessary changes. \n\nCVE-2015-5165\n\n Donghai Zhu discovered that the QEMU model of the RTL8139 network\n card did not sufficiently validate inputs in the C+ mode offload\n emulation, allowing a malicious guest to read uninitialized memory\n from the QEMU process\u0027s heap. \n\nCVE-2015-5225\n\n Mr Qinghao Tang from QIHU 360 Inc. \n\nFor the oldstable distribution (wheezy), these problems have been fixed\nin version 1.1.2+dfsg-6a+deb7u9. The oldstable distribution is only\naffected by CVE-2015-5165 and CVE-2015-5745. \n\nFor the stable distribution (jessie), these problems have been fixed in\nversion 1:2.1+dfsg-12+deb8u2. \n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 1:2.4+dfsg-1a. \n\nWe recommend that you upgrade your qemu packages. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory GLSA 201510-02\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n https://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n Title: QEMU: Arbitrary code execution\n Date: October 31, 2015\n Bugs: #551752, #555680, #556050, #556052\n ID: 201510-02\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nA heap-based buffer overflow in QEMU could result in execution of\narbitrary code. \n\nAffected packages\n=================\n\n -------------------------------------------------------------------\n Package / Vulnerable / Unaffected\n -------------------------------------------------------------------\n 1 app-emulation/qemu \u003c 2.3.0-r4 \u003e= 2.3.0-r4\n\nDescription\n===========\n\nHeap-based buffer overflow has been found in QEMU\u0027s PCNET controller. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll QEMU users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \"\u003e=app-emulation/qemu-2.3.0-r4\"\n\nReferences\n==========\n\n[ 1 ] CVE-2015-3209\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3209\n[ 2 ] CVE-2015-3214\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3214\n[ 3 ] CVE-2015-5154\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5154\n[ 4 ] CVE-2015-5158\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-5158\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n https://security.gentoo.org/glsa/201510-02\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2015 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n", "sources": [ { "db": "NVD", "id": "CVE-2015-3214" }, { "db": "JVNDB", "id": "JVNDB-2015-004512" }, { "db": "BID", "id": "75273" }, { "db": "VULHUB", "id": "VHN-81175" }, { "db": "VULMON", "id": "CVE-2015-3214" }, { "db": "PACKETSTORM", "id": "132839" }, { "db": "PACKETSTORM", "id": "132859" }, { "db": "PACKETSTORM", "id": "132838" }, { "db": "PACKETSTORM", "id": "132855" }, { "db": "PACKETSTORM", "id": "133422" }, { "db": "PACKETSTORM", "id": "134165" } ], "trust": 2.61 }, "exploit_availability": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "reference": "https://www.scap.org.cn/vuln/vhn-81175", "trust": 0.1, "type": "unknown" }, { "reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=37990", "trust": 0.1, "type": "exploit" } ], "sources": [ { "db": "VULHUB", "id": "VHN-81175" }, { "db": "VULMON", "id": "CVE-2015-3214" } ] }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2015-3214", "trust": 3.5 }, { "db": "BID", "id": "75273", "trust": 2.1 }, { "db": "SECTRACK", "id": "1032598", "trust": 1.8 }, { "db": "EXPLOIT-DB", "id": "37990", "trust": 1.8 }, { "db": "OPENWALL", "id": "OSS-SECURITY/2015/06/25/7", "trust": 1.8 }, { "db": "JVNDB", "id": "JVNDB-2015-004512", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201506-371", "trust": 0.7 }, { "db": "PACKETSTORM", "id": "133422", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "132859", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "132855", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "132838", "trust": 0.2 }, { "db": "PACKETSTORM", "id": "132839", "trust": 0.2 }, { "db": "VULHUB", "id": "VHN-81175", "trust": 0.1 }, { "db": "VULMON", "id": "CVE-2015-3214", "trust": 0.1 }, { "db": "PACKETSTORM", "id": "134165", "trust": 0.1 } ], "sources": [ { "db": "VULHUB", "id": "VHN-81175" }, { "db": "VULMON", "id": "CVE-2015-3214" }, { "db": "BID", "id": "75273" }, { "db": "JVNDB", "id": "JVNDB-2015-004512" }, { "db": "PACKETSTORM", "id": "132839" }, { "db": "PACKETSTORM", "id": "132859" }, { "db": "PACKETSTORM", "id": "132838" }, { "db": "PACKETSTORM", "id": "132855" }, { "db": "PACKETSTORM", "id": "133422" }, { "db": "PACKETSTORM", "id": "134165" }, { "db": "NVD", "id": "CVE-2015-3214" }, { "db": "CNNVD", "id": "CNNVD-201506-371" } ] }, "id": "VAR-201508-0166", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-81175" } ], "trust": 0.01 }, "last_update_date": "2023-12-18T11:48:38.431000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "KVM: PIT: control word is write-only", "trust": 0.8, "url": "https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "title": "Linux Kernel Archives", "trust": 0.8, "url": "http://www.kernel.org" }, { "title": "KVM: PIT: control word is write-only", "trust": 0.8, "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "title": "Main Page", "trust": 0.8, "url": "http://wiki.qemu.org/main_page" }, { "title": "Bug 1229640", "trust": 0.8, "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" }, { "title": "Linux kernel and QEMU\u2018pit_ioport_read()\u2019 Fixes for function buffer error vulnerabilities", "trust": 0.6, "url": "http://123.124.177.30/web/xxk/bdxqbyid.tag?id=179689" }, { "title": "Ubuntu Security Notice: qemu vulnerabilities", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-2692-1" }, { "title": "Red Hat: CVE-2015-3214", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=cve-2015-3214" }, { "title": "Debian Security Advisories: DSA-3348-1 qemu -- security update", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=e77a95c04be0a28f98566f006db46f03" }, { "title": "Debian CVElist Bug Report Logs: qemu: CVE-2015-5225: ui: vnc: heap memory corruption in vnc_refresh_server_surface", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=d315b3f2df801c1586a4d3ea5f0ef1c4" }, { "title": "Debian CVElist Bug Report Logs: qemu: CVE-2015-5158: scsi stack buffer overflow", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=2bc68b0a8f94995d352f509d204ba98b" }, { "title": "Debian CVElist Bug Report Logs: qemu: CVE-2015-5166: Use after free in QEMU/Xen block unplug protocol", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=78f6b481a815feb050c6fe696b774caa" }, { "title": "Debian CVElist Bug Report Logs: qemu: CVE-2015-3214: i8254: out-of-bounds memory access in pit_ioport_read function", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=3e5707b2974af878892901fb1518c885" }, { "title": "Debian CVElist Bug Report Logs: qemu: CVE-2015-5745: buffer overflow in virtio-serial", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=b661eddefc5e1edaa146807f1a72ab9d" }, { "title": "Debian CVElist Bug Report Logs: qemu: CVE-2015-5154: ide: atapi: heap overflow during I/O buffer memory access", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=ac31639f0a78082f2e78528ea7e0203f" }, { "title": "Debian CVElist Bug Report Logs: qemu: CVE-2015-5165: rtl8139 uninitialized heap memory information leakage to guest", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=0e14e001f6f939c9dca39f2c06ec9285" }, { "title": "cve_diff_checker", "trust": 0.1, "url": "https://github.com/lcatro/cve_diff_checker " }, { "title": "CVE-Study", "trust": 0.1, "url": "https://github.com/thdusdl1219/cve-study " } ], "sources": [ { "db": "VULMON", "id": "CVE-2015-3214" }, { "db": "JVNDB", "id": "JVNDB-2015-004512" }, { "db": "CNNVD", "id": "CNNVD-201506-371" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-119", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-81175" }, { "db": "JVNDB", "id": "JVNDB-2015-004512" }, { "db": "NVD", "id": "CVE-2015-3214" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.9, "url": "https://www.exploit-db.com/exploits/37990/" }, { "trust": 1.9, "url": "http://www.securityfocus.com/bid/75273" }, { "trust": 1.9, "url": "https://security.gentoo.org/glsa/201510-02" }, { "trust": 1.9, "url": "http://rhn.redhat.com/errata/rhsa-2015-1507.html" }, { "trust": 1.9, "url": "http://rhn.redhat.com/errata/rhsa-2015-1508.html" }, { "trust": 1.9, "url": "http://rhn.redhat.com/errata/rhsa-2015-1512.html" }, { "trust": 1.8, "url": "http://www.securitytracker.com/id/1032598" }, { "trust": 1.8, "url": "http://www.debian.org/security/2015/dsa-3348" }, { "trust": 1.8, "url": "http://www.openwall.com/lists/oss-security/2015/06/25/7" }, { "trust": 1.8, "url": "https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html" }, { "trust": 1.8, "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "trust": 1.8, "url": "http://mirror.linux.org.au/linux/kernel/v2.6/changelog-2.6.33" }, { "trust": 1.8, "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" }, { "trust": 1.8, "url": "https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "trust": 1.8, "url": "https://support.lenovo.com/product_security/qemu" }, { "trust": 1.8, "url": "https://support.lenovo.com/us/en/product_security/qemu" }, { "trust": 1.8, "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13" }, { "trust": 1.0, "url": "https://access.redhat.com/security/cve/cve-2015-3214" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-3214" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-3214" }, { "trust": 0.6, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-5154" }, { "trust": 0.6, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3214" }, { "trust": 0.6, "url": "https://access.redhat.com/errata/rhsa-2015:1507" }, { "trust": 0.6, "url": "https://access.redhat.com/errata/rhsa-2015:1508" }, { "trust": 0.6, "url": "https://www.mail-archive.com/qemu-devel@nongnu.org/msg304138.html" }, { "trust": 0.6, "url": "https://access.redhat.com/errata/rhsa-2015:1512" }, { "trust": 0.3, "url": "http://wiki.qemu.org/main_page" }, { "trust": 0.3, "url": "https://www.redhat.com/mailman/listinfo/rhsa-announce" }, { "trust": 0.3, "url": "https://bugzilla.redhat.com/):" }, { "trust": 0.3, "url": "https://access.redhat.com/security/team/key/" }, { "trust": 0.3, "url": "https://access.redhat.com/security/cve/cve-2015-5154" }, { "trust": 0.3, "url": "https://access.redhat.com/articles/11258" }, { "trust": 0.3, "url": "https://access.redhat.com/security/team/contact/" }, { "trust": 0.3, "url": "https://access.redhat.com/security/updates/classification/#important" }, { "trust": 0.2, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-5158" }, { "trust": 0.1, "url": "https://cwe.mitre.org/data/definitions/119.html" }, { "trust": 0.1, "url": "https://nvd.nist.gov" }, { "trust": 0.1, "url": "https://usn.ubuntu.com/2692-1/" }, { "trust": 0.1, "url": "http://www.ubuntu.com/usn/usn-2692-1" }, { "trust": 0.1, "url": "https://launchpad.net/ubuntu/+source/qemu/1:2.2+dfsg-5expubuntu9.3" }, { "trust": 0.1, "url": "https://launchpad.net/ubuntu/+source/qemu/2.0.0+dfsg-2ubuntu1.15" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-5745" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-5225" }, { "trust": 0.1, "url": "https://www.debian.org/security/faq" }, { "trust": 0.1, "url": "https://www.debian.org/security/" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-5165" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3214" }, { "trust": 0.1, "url": "http://creativecommons.org/licenses/by-sa/2.5" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5154" }, { "trust": 0.1, "url": "https://nvd.nist.gov/vuln/detail/cve-2015-3209" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-5158" }, { "trust": 0.1, "url": "https://security.gentoo.org/" }, { "trust": 0.1, "url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-3209" }, { "trust": 0.1, "url": "https://bugs.gentoo.org." } ], "sources": [ { "db": "VULHUB", "id": "VHN-81175" }, { "db": "VULMON", "id": "CVE-2015-3214" }, { "db": "BID", "id": "75273" }, { "db": "JVNDB", "id": "JVNDB-2015-004512" }, { "db": "PACKETSTORM", "id": "132839" }, { "db": "PACKETSTORM", "id": "132859" }, { "db": "PACKETSTORM", "id": "132838" }, { "db": "PACKETSTORM", "id": "132855" }, { "db": "PACKETSTORM", "id": "133422" }, { "db": "PACKETSTORM", "id": "134165" }, { "db": "NVD", "id": "CVE-2015-3214" }, { "db": "CNNVD", "id": "CNNVD-201506-371" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "VULHUB", "id": "VHN-81175" }, { "db": "VULMON", "id": "CVE-2015-3214" }, { "db": "BID", "id": "75273" }, { "db": "JVNDB", "id": "JVNDB-2015-004512" }, { "db": "PACKETSTORM", "id": "132839" }, { "db": "PACKETSTORM", "id": "132859" }, { "db": "PACKETSTORM", "id": "132838" }, { "db": "PACKETSTORM", "id": "132855" }, { "db": "PACKETSTORM", "id": "133422" }, { "db": "PACKETSTORM", "id": "134165" }, { "db": "NVD", "id": "CVE-2015-3214" }, { "db": "CNNVD", "id": "CNNVD-201506-371" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2015-08-31T00:00:00", "db": "VULHUB", "id": "VHN-81175" }, { "date": "2015-08-31T00:00:00", "db": "VULMON", "id": "CVE-2015-3214" }, { "date": "2015-06-17T00:00:00", "db": "BID", "id": "75273" }, { "date": "2015-09-01T00:00:00", "db": "JVNDB", "id": "JVNDB-2015-004512" }, { "date": "2015-07-27T15:37:06", "db": "PACKETSTORM", "id": "132839" }, { "date": "2015-07-29T01:13:01", "db": "PACKETSTORM", "id": "132859" }, { "date": "2015-07-27T15:36:52", "db": "PACKETSTORM", "id": "132838" }, { "date": "2015-07-29T00:57:08", "db": "PACKETSTORM", "id": "132855" }, { "date": "2015-09-03T22:28:25", "db": "PACKETSTORM", "id": "133422" }, { "date": "2015-11-02T16:49:11", "db": "PACKETSTORM", "id": "134165" }, { "date": "2015-08-31T10:59:07.580000", "db": "NVD", "id": "CVE-2015-3214" }, { "date": "2015-06-23T00:00:00", "db": "CNNVD", "id": "CNNVD-201506-371" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2023-02-13T00:00:00", "db": "VULHUB", "id": "VHN-81175" }, { "date": "2023-02-13T00:00:00", "db": "VULMON", "id": "CVE-2015-3214" }, { "date": "2015-12-08T22:03:00", "db": "BID", "id": "75273" }, { "date": "2015-09-01T00:00:00", "db": "JVNDB", "id": "JVNDB-2015-004512" }, { "date": "2023-02-13T00:48:24.553000", "db": "NVD", "id": "CVE-2015-3214" }, { "date": "2023-04-10T00:00:00", "db": "CNNVD", "id": "CNNVD-201506-371" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "local", "sources": [ { "db": "CNNVD", "id": "CNNVD-201506-371" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Linux Kernel and QEMU of i8254.c of pit_ioport_read Host in OS Vulnerabilities in arbitrary code execution", "sources": [ { "db": "JVNDB", "id": "JVNDB-2015-004512" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "buffer error", "sources": [ { "db": "CNNVD", "id": "CNNVD-201506-371" } ], "trust": 0.6 } }
ghsa-7g3q-j68f-2fw5
Vulnerability from github
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.
{ "affected": [], "aliases": [ "CVE-2015-3214" ], "database_specific": { "cwe_ids": [ "CWE-119" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2015-08-31T10:59:00Z", "severity": "MODERATE" }, "details": "The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.", "id": "GHSA-7g3q-j68f-2fw5", "modified": "2022-05-13T01:03:33Z", "published": "2022-05-13T01:03:33Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3214" }, { "type": "WEB", "url": "https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2015:1507" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2015:1508" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2015:1512" }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2015-3214" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/201510-02" }, { "type": "WEB", "url": "https://support.lenovo.com/product_security/qemu" }, { "type": "WEB", "url": "https://support.lenovo.com/us/en/product_security/qemu" }, { "type": "WEB", "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13" }, { "type": "WEB", "url": "https://www.exploit-db.com/exploits/37990" }, { "type": "WEB", "url": "https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html" }, { "type": "WEB", "url": "https://www.mail-archive.com/qemu-devel@nongnu.org/msg304138.html" }, { "type": "WEB", "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "type": "WEB", "url": "http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-1507.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-1508.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-1512.html" }, { "type": "WEB", "url": "http://www.debian.org/security/2015/dsa-3348" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2015/06/25/7" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/75273" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1032598" } ], "schema_version": "1.4.0", "severity": [] }
rhsa-2015_1507
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated qemu-kvm packages that fix two security issues and one bug are now\navailable for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for\nLinux on AMD64 and Intel 64 systems. The qemu-kvm package provides the\nuser-space component for running virtual machines using KVM.\n\nA heap buffer overflow flaw was found in the way QEMU\u0027s IDE subsystem\nhandled I/O buffer access while processing certain ATAPI commands.\nA privileged guest user in a guest with the CDROM drive enabled could\npotentially use this flaw to execute arbitrary code on the host with the\nprivileges of the host\u0027s QEMU process corresponding to the guest.\n(CVE-2015-5154)\n\nAn out-of-bounds memory access flaw, leading to memory corruption or\npossibly an information leak, was found in QEMU\u0027s pit_ioport_read()\nfunction. A privileged guest user in a QEMU guest, which had QEMU PIT\nemulation enabled, could potentially, in rare cases, use this flaw to\nexecute arbitrary code on the host with the privileges of the hosting QEMU\nprocess. (CVE-2015-3214)\n\nRed Hat would like to thank Matt Tait of Google\u0027s Project Zero security\nteam for reporting the CVE-2015-3214 issue. The CVE-2015-5154 issue was\ndiscovered by Kevin Wolf of Red Hat.\n\nThis update also fixes the following bug:\n\n* Due to an incorrect implementation of portable memory barriers, the QEMU\nemulator in some cases terminated unexpectedly when a virtual disk was\nunder heavy I/O load. This update fixes the implementation in order to\nachieve correct synchronization between QEMU\u0027s threads. As a result, the\ndescribed crash no longer occurs. (BZ#1233643)\n\nAll qemu-kvm users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. After installing this\nupdate, shut down all running virtual machines. Once all virtual machines\nhave shut down, start them again for this update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:1507", "url": "https://access.redhat.com/errata/RHSA-2015:1507" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1229640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" }, { "category": "external", "summary": "1243563", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1243563" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1507.json" } ], "title": "Red Hat Security Advisory: qemu-kvm security and bug fix update", "tracking": { "current_release_date": "2024-11-14T18:10:20+00:00", "generator": { "date": "2024-11-14T18:10:20+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2015:1507", "initial_release_date": "2015-07-27T13:31:59+00:00", "revision_history": [ { "date": "2015-07-27T13:31:59+00:00", "number": "1", "summary": "Initial version" }, { "date": "2015-07-27T13:31:59+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T18:10:20+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "product": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "product_id": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@1.5.3-86.el7_1.5?arch=i686\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-devel-10:1.5.3-86.el7_1.5.i686", "product": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.i686", "product_id": "libcacard-devel-10:1.5.3-86.el7_1.5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-devel@1.5.3-86.el7_1.5?arch=i686\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-10:1.5.3-86.el7_1.5.i686", "product": { "name": "libcacard-10:1.5.3-86.el7_1.5.i686", "product_id": "libcacard-10:1.5.3-86.el7_1.5.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard@1.5.3-86.el7_1.5?arch=i686\u0026epoch=10" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "product": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "product_id": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-tools@1.5.3-86.el7_1.5?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "product": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "product_id": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@1.5.3-86.el7_1.5?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "product": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "product_id": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-devel@1.5.3-86.el7_1.5?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-img-10:1.5.3-86.el7_1.5.x86_64", "product": { "name": "qemu-img-10:1.5.3-86.el7_1.5.x86_64", "product_id": "qemu-img-10:1.5.3-86.el7_1.5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img@1.5.3-86.el7_1.5?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "product": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "product_id": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm@1.5.3-86.el7_1.5?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "product": { "name": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "product_id": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-common@1.5.3-86.el7_1.5?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "product": { "name": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "product_id": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-tools@1.5.3-86.el7_1.5?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-10:1.5.3-86.el7_1.5.x86_64", "product": { "name": "libcacard-10:1.5.3-86.el7_1.5.x86_64", "product_id": "libcacard-10:1.5.3-86.el7_1.5.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard@1.5.3-86.el7_1.5?arch=x86_64\u0026epoch=10" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "libcacard-10:1.5.3-86.el7_1.5.ppc", "product": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc", "product_id": "libcacard-10:1.5.3-86.el7_1.5.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard@1.5.3-86.el7_1.5?arch=ppc\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "product": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "product_id": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-devel@1.5.3-86.el7_1.5?arch=ppc\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "product": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "product_id": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@1.5.3-86.el7_1.5?arch=ppc\u0026epoch=10" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "libcacard-10:1.5.3-86.el7_1.5.ppc64", "product": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc64", "product_id": "libcacard-10:1.5.3-86.el7_1.5.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard@1.5.3-86.el7_1.5?arch=ppc64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "product": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "product_id": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@1.5.3-86.el7_1.5?arch=ppc64\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "product": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "product_id": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-tools@1.5.3-86.el7_1.5?arch=ppc64\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "product": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "product_id": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-devel@1.5.3-86.el7_1.5?arch=ppc64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-img-10:1.5.3-86.el7_1.5.ppc64", "product": { "name": "qemu-img-10:1.5.3-86.el7_1.5.ppc64", "product_id": "qemu-img-10:1.5.3-86.el7_1.5.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img@1.5.3-86.el7_1.5?arch=ppc64\u0026epoch=10" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-10:1.5.3-86.el7_1.5.src", "product": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.src", "product_id": "qemu-kvm-10:1.5.3-86.el7_1.5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm@1.5.3-86.el7_1.5?arch=src\u0026epoch=10" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.src as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.src", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.src", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Client-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.src", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.src", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.src", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Server-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.src", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-img-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.src", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" }, "product_reference": "qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "relates_to_product_reference": "7Workstation-optional-7.1.Z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Matt Tait" ], "organization": "Google\u0027s Project Zero security team" } ], "cve": "CVE-2015-3214", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2015-06-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1229640" } ], "notes": [ { "category": "description", "text": "An out-of-bounds memory access flaw, leading to memory corruption or possibly an information leak, was found in QEMU\u0027s pit_ioport_read() function. A privileged guest user in a QEMU guest, which had QEMU PIT emulation enabled, could potentially, in rare cases, use this flaw to execute arbitrary code on the host with the privileges of the hosting QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does not affect the versions of the qemu and qemu-kvm packages as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise Linux 6 based versions of qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3. \n\nThis issue does affect the Red Hat Enterprise Linux 7 qemu-kvm and Red Hat Enterprise Linux 7 based versions of the qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3. Future updates for the respective releases may address this flaw.\n\nPlease note that by default QEMU/KVM guests use in-kernel (KVM) PIT emulation\nin which case the following applies:\n\nThis issue does not affect the Linux kernel versions as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise Linux MRG 2.\n\nThis issue does affect the kvm package as shipped with Red Hat Enterprise Linux 5. \n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-3214" }, { "category": "external", "summary": "RHBZ#1229640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-3214", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3214" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3214", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3214" } ], "release_date": "2015-06-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-07-27T13:31:59+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:1507" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.5, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:A/AC:H/Au:S/C:C/I:C/A:C", "version": "2.0" }, "products": [ "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function" }, { "acknowledgments": [ { "names": [ "Kevin Wolf" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2015-5154", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2015-06-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1243563" } ], "notes": [ { "category": "description", "text": "A heap buffer overflow flaw was found in the way QEMU\u0027s IDE subsystem handled I/O buffer access while processing certain ATAPI commands. A privileged guest user in a guest with the CDROM drive enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the host\u0027s QEMU process corresponding to the guest.", "title": "Vulnerability description" }, { "category": "summary", "text": "qemu: ide: atapi: heap overflow during I/O buffer memory access", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does not affect the versions of the kvm and xen packages as shipped with Red Hat Enterprise Linux 5, the versions of the qemu-kvm packages as shipped with Red Hat Enterprise Linux 6 and the Red Hat Enterprise Linux 6 based qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3, because they did not backport the upstream commit that introduced this issue.\n\nThis issue does affect the versions of qemu-kvm packages as shipped with Red Hat Enterprise Linux 7 and versions of Red Hat Enterprise Linux 7 based qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3. Future updates for the respective releases will address this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-5154" }, { "category": "external", "summary": "RHBZ#1243563", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1243563" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-5154", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5154" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-5154", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5154" } ], "release_date": "2015-07-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-07-27T13:31:59+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:1507" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.5, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:A/AC:H/Au:S/C:C/I:C/A:C", "version": "2.0" }, "products": [ "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Client-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Client-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Client-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Client-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Client-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Client-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7ComputeNode-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7ComputeNode-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7ComputeNode-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Server-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Server-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Server-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Server-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Server-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Server-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Workstation-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-devel-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:libcacard-tools-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:qemu-img-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.src", "7Workstation-optional-7.1.Z:qemu-kvm-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-common-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.i686", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.ppc64", "7Workstation-optional-7.1.Z:qemu-kvm-debuginfo-10:1.5.3-86.el7_1.5.x86_64", "7Workstation-optional-7.1.Z:qemu-kvm-tools-10:1.5.3-86.el7_1.5.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "qemu: ide: atapi: heap overflow during I/O buffer memory access" } ] }
rhsa-2015_1508
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated qemu-kvm-rhev packages that fix two security issues are now\navailable for Red Hat Enterprise Virtualization Hypervisor 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for\nLinux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the\nuser-space component for running virtual machines using KVM.\n\nA heap buffer overflow flaw was found in the way QEMU\u0027s IDE subsystem\nhandled I/O buffer access while processing certain ATAPI commands.\nA privileged guest user in a guest with the CDROM drive enabled could\npotentially use this flaw to execute arbitrary code on the host with the\nprivileges of the host\u0027s QEMU process corresponding to the guest.\n(CVE-2015-5154)\n\nAn out-of-bounds memory access flaw, leading to memory corruption or\npossibly an information leak, was found in QEMU\u0027s pit_ioport_read()\nfunction. A privileged guest user in a QEMU guest, which had QEMU PIT\nemulation enabled, could potentially, in rare cases, use this flaw to\nexecute arbitrary code on the host with the privileges of the hosting QEMU\nprocess. (CVE-2015-3214)\n\nRed Hat would like to thank Matt Tait of Google\u0027s Project Zero security\nteam for reporting the CVE-2015-3214 issue. The CVE-2015-5154 issue was\ndiscovered by Kevin Wolf of Red Hat.\n\nAll qemu-kvm-rhev users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue. After installing\nthis update, shut down all running virtual machines. Once all virtual\nmachines have shut down, start them again for this update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:1508", "url": "https://access.redhat.com/errata/RHSA-2015:1508" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1229640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" }, { "category": "external", "summary": "1243563", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1243563" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1508.json" } ], "title": "Red Hat Security Advisory: qemu-kvm-rhev security update", "tracking": { "current_release_date": "2024-11-14T18:10:53+00:00", "generator": { "date": "2024-11-14T18:10:53+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2015:1508", "initial_release_date": "2015-07-27T12:59:36+00:00", "revision_history": [ { "date": "2015-07-27T12:59:36+00:00", "number": "1", "summary": "Initial version" }, { "date": "2015-07-27T12:59:36+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T18:10:53+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "RHEV-H and VDSM for 7 Hosts", "product": { "name": "RHEV-H and VDSM for 7 Hosts", "product_id": "7Server-RHEV-Agents-7", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::hypervisor" } } } ], "category": "product_family", "name": "Red Hat Virtualization" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-common-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "product_id": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev-debuginfo@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-devel-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-tools-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-tools-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "product": { "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "product_id": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.1.2-23.el7_1.6?arch=src\u0026epoch=10" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of RHEV-H and VDSM for 7 Hosts", "product_id": "7Server-RHEV-Agents-7:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RHEV-Agents-7" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of RHEV-H and VDSM for 7 Hosts", "product_id": "7Server-RHEV-Agents-7:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RHEV-Agents-7" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of RHEV-H and VDSM for 7 Hosts", "product_id": "7Server-RHEV-Agents-7:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RHEV-Agents-7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of RHEV-H and VDSM for 7 Hosts", "product_id": "7Server-RHEV-Agents-7:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RHEV-Agents-7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of RHEV-H and VDSM for 7 Hosts", "product_id": "7Server-RHEV-Agents-7:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RHEV-Agents-7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src as a component of RHEV-H and VDSM for 7 Hosts", "product_id": "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src" }, "product_reference": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "relates_to_product_reference": "7Server-RHEV-Agents-7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of RHEV-H and VDSM for 7 Hosts", "product_id": "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RHEV-Agents-7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64 as a component of RHEV-H and VDSM for 7 Hosts", "product_id": "7Server-RHEV-Agents-7:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RHEV-Agents-7" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of RHEV-H and VDSM for 7 Hosts", "product_id": "7Server-RHEV-Agents-7:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RHEV-Agents-7" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Matt Tait" ], "organization": "Google\u0027s Project Zero security team" } ], "cve": "CVE-2015-3214", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2015-06-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1229640" } ], "notes": [ { "category": "description", "text": "An out-of-bounds memory access flaw, leading to memory corruption or possibly an information leak, was found in QEMU\u0027s pit_ioport_read() function. A privileged guest user in a QEMU guest, which had QEMU PIT emulation enabled, could potentially, in rare cases, use this flaw to execute arbitrary code on the host with the privileges of the hosting QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does not affect the versions of the qemu and qemu-kvm packages as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise Linux 6 based versions of qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3. \n\nThis issue does affect the Red Hat Enterprise Linux 7 qemu-kvm and Red Hat Enterprise Linux 7 based versions of the qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3. Future updates for the respective releases may address this flaw.\n\nPlease note that by default QEMU/KVM guests use in-kernel (KVM) PIT emulation\nin which case the following applies:\n\nThis issue does not affect the Linux kernel versions as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise Linux MRG 2.\n\nThis issue does affect the kvm package as shipped with Red Hat Enterprise Linux 5. \n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHEV-Agents-7:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-3214" }, { "category": "external", "summary": "RHBZ#1229640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-3214", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3214" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3214", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3214" } ], "release_date": "2015-06-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-07-27T12:59:36+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHEV-Agents-7:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:1508" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.5, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:A/AC:H/Au:S/C:C/I:C/A:C", "version": "2.0" }, "products": [ "7Server-RHEV-Agents-7:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function" }, { "acknowledgments": [ { "names": [ "Kevin Wolf" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2015-5154", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2015-06-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1243563" } ], "notes": [ { "category": "description", "text": "A heap buffer overflow flaw was found in the way QEMU\u0027s IDE subsystem handled I/O buffer access while processing certain ATAPI commands. A privileged guest user in a guest with the CDROM drive enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the host\u0027s QEMU process corresponding to the guest.", "title": "Vulnerability description" }, { "category": "summary", "text": "qemu: ide: atapi: heap overflow during I/O buffer memory access", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does not affect the versions of the kvm and xen packages as shipped with Red Hat Enterprise Linux 5, the versions of the qemu-kvm packages as shipped with Red Hat Enterprise Linux 6 and the Red Hat Enterprise Linux 6 based qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3, because they did not backport the upstream commit that introduced this issue.\n\nThis issue does affect the versions of qemu-kvm packages as shipped with Red Hat Enterprise Linux 7 and versions of Red Hat Enterprise Linux 7 based qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3. Future updates for the respective releases will address this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHEV-Agents-7:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-5154" }, { "category": "external", "summary": "RHBZ#1243563", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1243563" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-5154", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5154" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-5154", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5154" } ], "release_date": "2015-07-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-07-27T12:59:36+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHEV-Agents-7:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:1508" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.5, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:A/AC:H/Au:S/C:C/I:C/A:C", "version": "2.0" }, "products": [ "7Server-RHEV-Agents-7:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RHEV-Agents-7:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "qemu: ide: atapi: heap overflow during I/O buffer memory access" } ] }
rhsa-2015_1512
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated qemu-kvm-rhev packages that fix two security issues are now\navailable for Red Hat Enterprise Linux OpenStack Platform 6 and Red Hat\nEnterprise Linux OpenStack Platform 5 for RHEL 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for\nLinux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the\nuser-space component for running virtual machines using KVM.\n\nA heap buffer overflow flaw was found in the way QEMU\u0027s IDE subsystem\nhandled I/O buffer access while processing certain ATAPI commands.\nA privileged guest user in a guest with the CDROM drive enabled could\npotentially use this flaw to execute arbitrary code on the host with the\nprivileges of the host\u0027s QEMU process corresponding to the guest.\n(CVE-2015-5154)\n\nAn out-of-bounds memory access flaw, leading to memory corruption or\npossibly an information leak, was found in QEMU\u0027s pit_ioport_read()\nfunction. A privileged guest user in a QEMU guest, which had QEMU PIT\nemulation enabled, could potentially, in rare cases, use this flaw to\nexecute arbitrary code on the host with the privileges of the hosting QEMU\nprocess. (CVE-2015-3214)\n\nRed Hat would like to thank Matt Tait of Google\u0027s Project Zero security\nteam for reporting the CVE-2015-3214 issue. The CVE-2015-5154 issue was\ndiscovered by Kevin Wolf of Red Hat.\n\nAll qemu-kvm-rhev users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue. After installing\nthis update, shut down all running virtual machines. Once all virtual\nmachines have shut down, start them again for this update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2015:1512", "url": "https://access.redhat.com/errata/RHSA-2015:1512" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1229640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" }, { "category": "external", "summary": "1243563", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1243563" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1512.json" } ], "title": "Red Hat Security Advisory: qemu-kvm-rhev security update", "tracking": { "current_release_date": "2024-11-14T18:10:58+00:00", "generator": { "date": "2024-11-14T18:10:58+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.0" } }, "id": "RHSA-2015:1512", "initial_release_date": "2015-07-28T17:50:13+00:00", "revision_history": [ { "date": "2015-07-28T17:50:13+00:00", "number": "1", "summary": "Initial version" }, { "date": "2015-07-28T17:50:13+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-14T18:10:58+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7", "product": { "name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7", "product_id": "7Server-RH7-RHOS-5.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:5::el7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7", "product": { "name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7", "product_id": "7Server-RH7-RHOS-6.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:openstack:6::el7" } } } ], "category": "product_family", "name": "Red Hat OpenStack Platform" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-common-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "product_id": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev-debuginfo@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-devel-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-tools-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-tools-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libcacard-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } }, { "category": "product_version", "name": "qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "product": { "name": "qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_id": "qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-img-rhev@2.1.2-23.el7_1.6?arch=x86_64\u0026epoch=10" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "product": { "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "product_id": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.1.2-23.el7_1.6?arch=src\u0026epoch=10" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7", "product_id": "7Server-RH7-RHOS-5.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7", "product_id": "7Server-RH7-RHOS-5.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7", "product_id": "7Server-RH7-RHOS-5.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7", "product_id": "7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7", "product_id": "7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7", "product_id": "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src" }, "product_reference": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "relates_to_product_reference": "7Server-RH7-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7", "product_id": "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7", "product_id": "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7", "product_id": "7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-5.0" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7", "product_id": "7Server-RH7-RHOS-6.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-6.0" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7", "product_id": "7Server-RH7-RHOS-6.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-6.0" }, { "category": "default_component_of", "full_product_name": { "name": "libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7", "product_id": "7Server-RH7-RHOS-6.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-6.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7", "product_id": "7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-6.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7", "product_id": "7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-6.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7", "product_id": "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src" }, "product_reference": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "relates_to_product_reference": "7Server-RH7-RHOS-6.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7", "product_id": "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-6.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7", "product_id": "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-6.0" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7", "product_id": "7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" }, "product_reference": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "relates_to_product_reference": "7Server-RH7-RHOS-6.0" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Matt Tait" ], "organization": "Google\u0027s Project Zero security team" } ], "cve": "CVE-2015-3214", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2015-06-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1229640" } ], "notes": [ { "category": "description", "text": "An out-of-bounds memory access flaw, leading to memory corruption or possibly an information leak, was found in QEMU\u0027s pit_ioport_read() function. A privileged guest user in a QEMU guest, which had QEMU PIT emulation enabled, could potentially, in rare cases, use this flaw to execute arbitrary code on the host with the privileges of the hosting QEMU process.", "title": "Vulnerability description" }, { "category": "summary", "text": "qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does not affect the versions of the qemu and qemu-kvm packages as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise Linux 6 based versions of qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3. \n\nThis issue does affect the Red Hat Enterprise Linux 7 qemu-kvm and Red Hat Enterprise Linux 7 based versions of the qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3. Future updates for the respective releases may address this flaw.\n\nPlease note that by default QEMU/KVM guests use in-kernel (KVM) PIT emulation\nin which case the following applies:\n\nThis issue does not affect the Linux kernel versions as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise Linux MRG 2.\n\nThis issue does affect the kvm package as shipped with Red Hat Enterprise Linux 5. \n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOS-5.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-3214" }, { "category": "external", "summary": "RHBZ#1229640", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-3214", "url": "https://www.cve.org/CVERecord?id=CVE-2015-3214" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-3214", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3214" } ], "release_date": "2015-06-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-07-28T17:50:13+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RH7-RHOS-5.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:1512" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.5, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:A/AC:H/Au:S/C:C/I:C/A:C", "version": "2.0" }, "products": [ "7Server-RH7-RHOS-5.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function" }, { "acknowledgments": [ { "names": [ "Kevin Wolf" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2015-5154", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2015-06-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1243563" } ], "notes": [ { "category": "description", "text": "A heap buffer overflow flaw was found in the way QEMU\u0027s IDE subsystem handled I/O buffer access while processing certain ATAPI commands. A privileged guest user in a guest with the CDROM drive enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the host\u0027s QEMU process corresponding to the guest.", "title": "Vulnerability description" }, { "category": "summary", "text": "qemu: ide: atapi: heap overflow during I/O buffer memory access", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does not affect the versions of the kvm and xen packages as shipped with Red Hat Enterprise Linux 5, the versions of the qemu-kvm packages as shipped with Red Hat Enterprise Linux 6 and the Red Hat Enterprise Linux 6 based qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3, because they did not backport the upstream commit that introduced this issue.\n\nThis issue does affect the versions of qemu-kvm packages as shipped with Red Hat Enterprise Linux 7 and versions of Red Hat Enterprise Linux 7 based qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3. Future updates for the respective releases will address this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RH7-RHOS-5.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2015-5154" }, { "category": "external", "summary": "RHBZ#1243563", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1243563" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2015-5154", "url": "https://www.cve.org/CVERecord?id=CVE-2015-5154" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-5154", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5154" } ], "release_date": "2015-07-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2015-07-28T17:50:13+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RH7-RHOS-5.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2015:1512" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "ADJACENT_NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.5, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:A/AC:H/Au:S/C:C/I:C/A:C", "version": "2.0" }, "products": [ "7Server-RH7-RHOS-5.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-devel-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:libcacard-tools-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.src", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.6.x86_64", "7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "qemu: ide: atapi: heap overflow during I/O buffer memory access" } ] }
gsd-2015-3214
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2015-3214", "description": "The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.", "id": "GSD-2015-3214", "references": [ "https://www.suse.com/security/cve/CVE-2015-3214.html", "https://www.debian.org/security/2015/dsa-3348", "https://access.redhat.com/errata/RHSA-2015:1512", "https://access.redhat.com/errata/RHSA-2015:1508", "https://access.redhat.com/errata/RHSA-2015:1507", "https://ubuntu.com/security/CVE-2015-3214", "https://advisories.mageia.org/CVE-2015-3214.html", "https://linux.oracle.com/cve/CVE-2015-3214.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2015-3214" ], "details": "The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.", "id": "GSD-2015-3214", "modified": "2023-12-13T01:20:07.535026Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2015-3214", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_affected": "=", "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://security.gentoo.org/glsa/201510-02", "refsource": "MISC", "url": "https://security.gentoo.org/glsa/201510-02" }, { "name": "https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13", "refsource": "MISC", "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13" }, { "name": "http://rhn.redhat.com/errata/RHSA-2015-1507.html", "refsource": "MISC", "url": "http://rhn.redhat.com/errata/RHSA-2015-1507.html" }, { "name": "http://rhn.redhat.com/errata/RHSA-2015-1508.html", "refsource": "MISC", "url": "http://rhn.redhat.com/errata/RHSA-2015-1508.html" }, { "name": "http://rhn.redhat.com/errata/RHSA-2015-1512.html", "refsource": "MISC", "url": "http://rhn.redhat.com/errata/RHSA-2015-1512.html" }, { "name": "http://www.debian.org/security/2015/dsa-3348", "refsource": "MISC", "url": "http://www.debian.org/security/2015/dsa-3348" }, { "name": "http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33", "refsource": "MISC", "url": "http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33" }, { "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924", "refsource": "MISC", "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "name": "http://www.openwall.com/lists/oss-security/2015/06/25/7", "refsource": "MISC", "url": "http://www.openwall.com/lists/oss-security/2015/06/25/7" }, { "name": "http://www.securityfocus.com/bid/75273", "refsource": "MISC", "url": "http://www.securityfocus.com/bid/75273" }, { "name": "http://www.securitytracker.com/id/1032598", "refsource": "MISC", "url": "http://www.securitytracker.com/id/1032598" }, { "name": "https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924", "refsource": "MISC", "url": "https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "name": "https://support.lenovo.com/product_security/qemu", "refsource": "MISC", "url": "https://support.lenovo.com/product_security/qemu" }, { "name": "https://support.lenovo.com/us/en/product_security/qemu", "refsource": "MISC", "url": "https://support.lenovo.com/us/en/product_security/qemu" }, { "name": "https://www.exploit-db.com/exploits/37990/", "refsource": "MISC", "url": "https://www.exploit-db.com/exploits/37990/" }, { "name": "https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html", "refsource": "MISC", "url": "https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640", "refsource": "MISC", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "2.6.32", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "2.3.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:arista:eos:4.15:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:arista:eos:4.14:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:arista:eos:4.13:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:arista:eos:4.12:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:lenovo:emc_px12-450r_ivx:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "1.0.10.33264", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:lenovo:emc_px12-400r_ivx:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "1.0.10.33264", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.1_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.2_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.3_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.7_ppc64:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2015-3214" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-119" } ] } ] }, "references": { "reference_data": [ { "name": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924", "refsource": "CONFIRM", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "name": "https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924", "refsource": "CONFIRM", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640", "refsource": "CONFIRM", "tags": [ "Issue Tracking" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1229640" }, { "name": "http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33", "refsource": "CONFIRM", "tags": [ "Broken Link", "Vendor Advisory" ], "url": "http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33" }, { "name": "[oss-security] 20150625 Re: CVE request -- Linux kernel - kvm: x86: out-of-bounds memory access in pit_ioport_read function", "refsource": "MLIST", "tags": [ "Mailing List" ], "url": "http://www.openwall.com/lists/oss-security/2015/06/25/7" }, { "name": "GLSA-201510-02", "refsource": "GENTOO", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/201510-02" }, { "name": "75273", "refsource": "BID", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/75273" }, { "name": "https://support.lenovo.com/product_security/qemu", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://support.lenovo.com/product_security/qemu" }, { "name": "1032598", "refsource": "SECTRACK", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securitytracker.com/id/1032598" }, { "name": "https://support.lenovo.com/us/en/product_security/qemu", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://support.lenovo.com/us/en/product_security/qemu" }, { "name": "RHSA-2015:1512", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1512.html" }, { "name": "RHSA-2015:1508", "refsource": "REDHAT", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1508.html" }, { "name": "RHSA-2015:1507", "refsource": "REDHAT", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1507.html" }, { "name": "37990", "refsource": "EXPLOIT-DB", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://www.exploit-db.com/exploits/37990/" }, { "name": "DSA-3348", "refsource": "DEBIAN", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "http://www.debian.org/security/2015/dsa-3348" }, { "name": "https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13", "refsource": "MISC", "tags": [ "Third Party Advisory" ], "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13" }, { "name": "https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html", "refsource": "MISC", "tags": [], "url": "https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, "exploitabilityScore": 3.4, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false } }, "lastModifiedDate": "2023-02-13T00:48Z", "publishedDate": "2015-08-31T10:59Z" } } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.