[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SECURITY] [DLA 842-1] qemu-kvm security update



Package        : qemu-kvm
Version        : 1.1.2+dfsg-6+deb7u20
CVE ID         : CVE-2017-2615 CVE-2017-2620 CVE-2017-5898 CVE-2017-5973


Several vulnerabilities were discovered in qemu-kvm, a full
virtualization solution for Linux hosts on x86 hardware with x86 guests.

CVE-2017-2615

    The Cirrus CLGD 54xx VGA Emulator in qemu-kvm is vulnerable to an
    out-of-bounds access issue. It could occur while copying VGA data
    via bitblt copy in backward mode.

    A privileged user inside guest could use this flaw to crash the
    Qemu process resulting in DoS OR potentially execute arbitrary
    code on the host with privileges of qemu-kvm process on the host.

CVE-2017-2620

    The Cirrus CLGD 54xx VGA Emulator in qemu-kvm is vulnerable to an
    out-of-bounds access issue. It could occur while copying VGA data
    in cirrus_bitblt_cputovideo.

    A privileged user inside guest could use this flaw to crash the
    Qemu process resulting in DoS OR potentially execute arbitrary
    code on the host with privileges of qemu-kvm process on the host.

CVE-2017-5898

    The CCID Card device emulator support is vulnerable to an integer
    overflow flaw. It could occur while passing message via
    command/responses packets to and from the host.

    A privileged user inside guest could use this flaw to crash the
    qemu-kvm process on the host resulting in a DoS.

    This issue does not affect the qemu-kvm binaries in Debian but we
    apply the patch to the sources to stay in sync with the qemu
    package.

CVE-2017-5973

    The USB xHCI controller emulator support in qemu-kvm is vulnerable
    to an infinite loop issue. It could occur while processing control
    transfer descriptors' sequence in xhci_kick_epctx.

    A privileged user inside guest could use this flaw to crash the
    qemu-kvm process resulting in a DoS.

This update also updates the fix CVE-2016-9921 since it was too strict
and broke certain guests.

For Debian 7 "Wheezy", these problems have been fixed in version
1.1.2+dfsg-6+deb7u20.

We recommend that you upgrade your qemu-kvm packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

Attachment: signature.asc
Description: PGP signature


Reply to: