rhsa-2014_0927
Vulnerability from csaf_redhat
Published
2014-07-23 16:15
Modified
2024-11-22 08:20
Summary
Red Hat Security Advisory: qemu-kvm security and bug fix update
Notes
Topic
Updated qemu-kvm packages that fix multiple security issues and various
bugs are now available for Red Hat Enterprise Linux 7.
The Red Hat Security Response Team has rated this update as having Moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
KVM (Kernel-based Virtual Machine) is a full virtualization solution for
Linux on AMD64 and Intel 64 systems. The qemu-kvm package provides the
user-space component for running virtual machines using KVM.
Two integer overflow flaws were found in the QEMU block driver for QCOW
version 1 disk images. A user able to alter the QEMU disk image files
loaded by a guest could use either of these flaws to corrupt QEMU process
memory on the host, which could potentially result in arbitrary code
execution on the host with the privileges of the QEMU process.
(CVE-2014-0222, CVE-2014-0223)
Multiple buffer overflow, input validation, and out-of-bounds write flaws
were found in the way virtio, virtio-net, virtio-scsi, usb, and hpet
drivers of QEMU handled state loading after migration. A user able to alter
the savevm data (either on the disk or over the wire during migration)
could use either of these flaws to corrupt QEMU process memory on the
(destination) host, which could potentially result in arbitrary code
execution on the host with the privileges of the QEMU process.
(CVE-2013-4148, CVE-2013-4149, CVE-2013-4150, CVE-2013-4151, CVE-2013-4527,
CVE-2013-4529, CVE-2013-4535, CVE-2013-4536, CVE-2013-4541, CVE-2013-4542,
CVE-2013-6399, CVE-2014-0182, CVE-2014-3461)
These issues were discovered by Michael S. Tsirkin, Anthony Liguori and
Michael Roth of Red Hat: CVE-2013-4148, CVE-2013-4149, CVE-2013-4150,
CVE-2013-4151, CVE-2013-4527, CVE-2013-4529, CVE-2013-4535, CVE-2013-4536,
CVE-2013-4541, CVE-2013-4542, CVE-2013-6399, CVE-2014-0182, and
CVE-2014-3461.
This update also fixes the following bugs:
* Previously, QEMU did not free pre-allocated zero clusters correctly and
the clusters under some circumstances leaked. With this update,
pre-allocated zero clusters are freed appropriately and the cluster leaks
no longer occur. (BZ#1110188)
* Prior to this update, the QEMU command interface did not properly handle
resizing of cache memory during guest migration, causing QEMU to terminate
unexpectedly with a segmentation fault and QEMU to fail. This update fixes
the related code and QEMU no longer crashes in the described situation.
(BZ#1110191)
* Previously, when a guest device was hot unplugged, QEMU correctly removed
the corresponding file descriptor watch but did not re-create it after the
device was re-connected. As a consequence, the guest became unable to
receive any data from the host over this device. With this update, the file
descriptor's watch is re-created and the guest in the above scenario can
communicate with the host as expected. (BZ#1110219)
* Previously, the QEMU migration code did not account for the gaps caused
by hot unplugged devices and thus expected more memory to be transferred
during migrations. As a consequence, guest migration failed to complete
after multiple devices were hot unplugged. In addition, the migration info
text displayed erroneous values for the "remaining ram" item. With this
update, QEMU calculates memory after a device has been unplugged correctly,
and any subsequent guest migrations proceed as expected. (BZ#1110189)
All qemu-kvm users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. After installing this
update, shut down all running virtual machines. Once all virtual machines
have shut down, start them again for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated qemu-kvm packages that fix multiple security issues and various\nbugs are now available for Red Hat Enterprise Linux 7.\n\nThe Red Hat Security Response Team has rated this update as having Moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for\nLinux on AMD64 and Intel 64 systems. The qemu-kvm package provides the\nuser-space component for running virtual machines using KVM.\n\nTwo integer overflow flaws were found in the QEMU block driver for QCOW\nversion 1 disk images. A user able to alter the QEMU disk image files\nloaded by a guest could use either of these flaws to corrupt QEMU process\nmemory on the host, which could potentially result in arbitrary code\nexecution on the host with the privileges of the QEMU process.\n(CVE-2014-0222, CVE-2014-0223)\n\nMultiple buffer overflow, input validation, and out-of-bounds write flaws\nwere found in the way virtio, virtio-net, virtio-scsi, usb, and hpet\ndrivers of QEMU handled state loading after migration. A user able to alter\nthe savevm data (either on the disk or over the wire during migration)\ncould use either of these flaws to corrupt QEMU process memory on the\n(destination) host, which could potentially result in arbitrary code\nexecution on the host with the privileges of the QEMU process.\n(CVE-2013-4148, CVE-2013-4149, CVE-2013-4150, CVE-2013-4151, CVE-2013-4527,\nCVE-2013-4529, CVE-2013-4535, CVE-2013-4536, CVE-2013-4541, CVE-2013-4542,\nCVE-2013-6399, CVE-2014-0182, CVE-2014-3461)\n\nThese issues were discovered by Michael S. Tsirkin, Anthony Liguori and\nMichael Roth of Red Hat: CVE-2013-4148, CVE-2013-4149, CVE-2013-4150,\nCVE-2013-4151, CVE-2013-4527, CVE-2013-4529, CVE-2013-4535, CVE-2013-4536,\nCVE-2013-4541, CVE-2013-4542, CVE-2013-6399, CVE-2014-0182, and\nCVE-2014-3461.\n\nThis update also fixes the following bugs:\n\n* Previously, QEMU did not free pre-allocated zero clusters correctly and\nthe clusters under some circumstances leaked. With this update,\npre-allocated zero clusters are freed appropriately and the cluster leaks\nno longer occur. (BZ#1110188)\n\n* Prior to this update, the QEMU command interface did not properly handle\nresizing of cache memory during guest migration, causing QEMU to terminate\nunexpectedly with a segmentation fault and QEMU to fail. This update fixes\nthe related code and QEMU no longer crashes in the described situation.\n(BZ#1110191)\n\n* Previously, when a guest device was hot unplugged, QEMU correctly removed\nthe corresponding file descriptor watch but did not re-create it after the\ndevice was re-connected. As a consequence, the guest became unable to\nreceive any data from the host over this device. With this update, the file\ndescriptor\u0027s watch is re-created and the guest in the above scenario can\ncommunicate with the host as expected. (BZ#1110219)\n\n* Previously, the QEMU migration code did not account for the gaps caused\nby hot unplugged devices and thus expected more memory to be transferred\nduring migrations. As a consequence, guest migration failed to complete\nafter multiple devices were hot unplugged. In addition, the migration info\ntext displayed erroneous values for the \"remaining ram\" item. With this\nupdate, QEMU calculates memory after a device has been unplugged correctly,\nand any subsequent guest migrations proceed as expected. (BZ#1110189)\n\nAll qemu-kvm users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. After installing this\nupdate, shut down all running virtual machines. Once all virtual machines\nhave shut down, start them again for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:0927",
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1066334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066334"
},
{
"category": "external",
"summary": "1066337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066337"
},
{
"category": "external",
"summary": "1066340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066340"
},
{
"category": "external",
"summary": "1066342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066342"
},
{
"category": "external",
"summary": "1066347",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066347"
},
{
"category": "external",
"summary": "1066353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066353"
},
{
"category": "external",
"summary": "1066361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066361"
},
{
"category": "external",
"summary": "1066382",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066382"
},
{
"category": "external",
"summary": "1066384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066384"
},
{
"category": "external",
"summary": "1066401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066401"
},
{
"category": "external",
"summary": "1088986",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088986"
},
{
"category": "external",
"summary": "1096821",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1096821"
},
{
"category": "external",
"summary": "1097216",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1097216"
},
{
"category": "external",
"summary": "1097222",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1097222"
},
{
"category": "external",
"summary": "1110188",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1110188"
},
{
"category": "external",
"summary": "1110189",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1110189"
},
{
"category": "external",
"summary": "1110191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1110191"
},
{
"category": "external",
"summary": "1110219",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1110219"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0927.json"
}
],
"title": "Red Hat Security Advisory: qemu-kvm security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T08:20:46+00:00",
"generator": {
"date": "2024-11-22T08:20:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2014:0927",
"initial_release_date": "2014-07-23T16:15:12+00:00",
"revision_history": [
{
"date": "2014-07-23T16:15:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-07-23T16:15:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T08:20:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"product": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"product_id": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@1.5.3-60.el7_0.5?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"product": {
"name": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"product_id": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcacard-tools@1.5.3-60.el7_0.5?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"product": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"product_id": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcacard-devel@1.5.3-60.el7_0.5?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"product": {
"name": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"product_id": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-guest-agent@1.5.3-60.el7_0.5?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"product": {
"name": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"product_id": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-common@1.5.3-60.el7_0.5?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"product": {
"name": "qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"product_id": "qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-img@1.5.3-60.el7_0.5?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "libcacard-10:1.5.3-60.el7_0.5.x86_64",
"product": {
"name": "libcacard-10:1.5.3-60.el7_0.5.x86_64",
"product_id": "libcacard-10:1.5.3-60.el7_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcacard@1.5.3-60.el7_0.5?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"product": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"product_id": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm@1.5.3-60.el7_0.5?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"product": {
"name": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"product_id": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-tools@1.5.3-60.el7_0.5?arch=x86_64\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"product": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"product_id": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@1.5.3-60.el7_0.5?arch=i686\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"product": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"product_id": "libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcacard-devel@1.5.3-60.el7_0.5?arch=i686\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "libcacard-10:1.5.3-60.el7_0.5.i686",
"product": {
"name": "libcacard-10:1.5.3-60.el7_0.5.i686",
"product_id": "libcacard-10:1.5.3-60.el7_0.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcacard@1.5.3-60.el7_0.5?arch=i686\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.src",
"product": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.src",
"product_id": "qemu-kvm-10:1.5.3-60.el7_0.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm@1.5.3-60.el7_0.5?arch=src\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.src",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.src",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Client-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.src",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.src",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.src",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.src",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Server-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.src",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.src",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
},
"product_reference": "qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.0.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2013-4148",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2013-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1066334"
}
],
"notes": [
{
"category": "description",
"text": "Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: virtio-net: buffer overflow on invalid state load",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does not affect the versions of kvm package as shipped with\nRed Hat Enterprise Linux 5.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4148"
},
{
"category": "external",
"summary": "RHBZ#1066334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4148",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4148"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4148",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4148"
}
],
"release_date": "2013-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qemu: virtio-net: buffer overflow on invalid state load"
},
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2013-4149",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2013-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1066337"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow remote attackers to execute arbitrary code via a large MAC table.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: virtio-net: out-of-bounds buffer write on load",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does not affect the versions of kvm package as shipped with\nRed Hat Enterprise Linux 5.\n\nThis issue does not affect the versions of qemu-kvm package as shipped\nwith Red Hat Enterprise Linux 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4149"
},
{
"category": "external",
"summary": "RHBZ#1066337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066337"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4149",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4149"
}
],
"release_date": "2013-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qemu: virtio-net: out-of-bounds buffer write on load"
},
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2013-4150",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2013-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1066340"
}
],
"notes": [
{
"category": "description",
"text": "The virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors in which the value of curr_queues is greater than max_queues, which triggers an out-of-bounds write.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: virtio-net: out-of-bounds buffer write on invalid state load",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does not affect the versions of kvm package as shipped with\nRed Hat Enterprise Linux 5.\n\nThis issue does not affect the versions of qemu-kvm package as shipped\nwith Red Hat Enterprise Linux 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4150"
},
{
"category": "external",
"summary": "RHBZ#1066340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066340"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4150",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4150"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4150",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4150"
}
],
"release_date": "2013-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qemu: virtio-net: out-of-bounds buffer write on invalid state load"
},
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2013-4151",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2013-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1066342"
}
],
"notes": [
{
"category": "description",
"text": "The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds write.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: virtio: out-of-bounds buffer write on invalid state load",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4151"
},
{
"category": "external",
"summary": "RHBZ#1066342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4151",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4151"
}
],
"release_date": "2013-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qemu: virtio: out-of-bounds buffer write on invalid state load"
},
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2013-4527",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2013-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1066347"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vectors related to the number of timers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: hpet: buffer overrun on invalid state load",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does not affect the versions of kvm package as shipped with\nRed Hat Enterprise Linux 5.\n\nThis issue does not affect the versions of qemu-kvm package as shipped\nwith Red Hat Enterprise Linux 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4527"
},
{
"category": "external",
"summary": "RHBZ#1066347",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066347"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4527",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4527"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4527",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4527"
}
],
"release_date": "2013-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qemu: hpet: buffer overrun on invalid state load"
},
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2013-4529",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2013-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1066353"
}
],
"notes": [
{
"category": "description",
"text": "Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: hw/pci/pcie_aer.c: buffer overrun on invalid state load",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does not affect the versions of kvm package as shipped with\nRed Hat Enterprise Linux 5.\n\nThis issue does not affect the versions of qemu-kvm package as shipped\nwith Red Hat Enterprise Linux 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4529"
},
{
"category": "external",
"summary": "RHBZ#1066353",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066353"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4529",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4529"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4529",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4529"
}
],
"release_date": "2013-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qemu: hw/pci/pcie_aer.c: buffer overrun on invalid state load"
},
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2013-4535",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2013-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1066401"
}
],
"notes": [
{
"category": "description",
"text": "The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: virtio: insufficient validation of num_sg when mapping",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4535"
},
{
"category": "external",
"summary": "RHBZ#1066401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4535",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4535"
}
],
"release_date": "2013-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qemu: virtio: insufficient validation of num_sg when mapping"
},
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2013-4536",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2013-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1066401"
}
],
"notes": [
{
"category": "description",
"text": "An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: virtio: insufficient validation of num_sg when mapping",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4536"
},
{
"category": "external",
"summary": "RHBZ#1066401",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066401"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4536",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4536"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4536",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4536"
}
],
"release_date": "2013-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qemu: virtio: insufficient validation of num_sg when mapping"
},
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2013-4541",
"discovery_date": "2013-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1066384"
}
],
"notes": [
{
"category": "description",
"text": "The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_index value.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect the versions of kvm package as shipped with\nRed Hat Enterprise Linux 5.\n\nThis issue does affect the versions of qemu-kvm package as shipped with\nRed Hat Enterprise Linux 7.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4541"
},
{
"category": "external",
"summary": "RHBZ#1066384",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066384"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4541",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4541"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4541",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4541"
}
],
"release_date": "2013-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load"
},
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2013-4542",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2013-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1066382"
}
],
"notes": [
{
"category": "description",
"text": "The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds array access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: virtio-scsi: buffer overrun on invalid state load",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does not affect the versions of kvm package as shipped with\nRed Hat Enterprise Linux 5.\n\nThis issue does affect the versions of qemu-kvm package as shipped with\nRed Hat Enterprise Linux 7.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4542"
},
{
"category": "external",
"summary": "RHBZ#1066382",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066382"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4542",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4542"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4542",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4542"
}
],
"release_date": "2013-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qemu: virtio-scsi: buffer overrun on invalid state load"
},
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2013-6399",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2013-07-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1066361"
}
],
"notes": [
{
"category": "description",
"text": "Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: virtio: buffer overrun on incoming migration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does affect the versions of kvm package as shipped with\nRed Hat Enterprise Linux 5.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-6399"
},
{
"category": "external",
"summary": "RHBZ#1066361",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1066361"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-6399",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-6399"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-6399",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6399"
}
],
"release_date": "2013-12-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qemu: virtio: buffer overrun on incoming migration"
},
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2014-0182",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2014-04-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1088986"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted config length in a savevm image.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: virtio: out-of-bounds buffer write on state load with invalid config_len",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0182"
},
{
"category": "external",
"summary": "RHBZ#1088986",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1088986"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0182",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0182"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0182",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0182"
}
],
"release_date": "2014-04-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qemu: virtio: out-of-bounds buffer write on state load with invalid config_len"
},
{
"acknowledgments": [
{
"names": [
"NSA"
]
}
],
"cve": "CVE-2014-0222",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2014-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1097216"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: qcow1: validate L2 table size to avoid integer overflows",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0222"
},
{
"category": "external",
"summary": "RHBZ#1097216",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1097216"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0222",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0222"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0222",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0222"
}
],
"release_date": "2014-05-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Qemu: qcow1: validate L2 table size to avoid integer overflows"
},
{
"acknowledgments": [
{
"names": [
"NSA"
]
}
],
"cve": "CVE-2014-0223",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2014-05-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1097222"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: qcow1: validate image size to avoid out-of-bounds memory access",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-0223"
},
{
"category": "external",
"summary": "RHBZ#1097222",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1097222"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-0223",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-0223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0223"
}
],
"release_date": "2014-05-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Qemu: qcow1: validate image size to avoid out-of-bounds memory access"
},
{
"acknowledgments": [
{
"names": [
"Michael S. Tsirkin"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
},
{
"names": [
"Anthony Liguori",
"Michael Roth"
]
}
],
"cve": "CVE-2014-3461",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2014-05-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1096821"
}
],
"notes": [
{
"category": "description",
"text": "hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to \"USB post load checks.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: usb: fix up post load checks",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3461"
},
{
"category": "external",
"summary": "RHBZ#1096821",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1096821"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3461",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3461"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3461",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3461"
}
],
"release_date": "2014-05-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2014-07-23T16:15:12+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:0927"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 3.7,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Client-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Client-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Client-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7ComputeNode-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7ComputeNode-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7ComputeNode-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Server-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Server-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Server-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:libcacard-devel-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:libcacard-tools-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-guest-agent-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-img-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.src",
"7Workstation-optional-7.0.Z:qemu-kvm-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-common-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.i686",
"7Workstation-optional-7.0.Z:qemu-kvm-debuginfo-10:1.5.3-60.el7_0.5.x86_64",
"7Workstation-optional-7.0.Z:qemu-kvm-tools-10:1.5.3-60.el7_0.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Qemu: usb: fix up post load checks"
}
]
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.