Updated xen packages that fix one security issue are now available for Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The xen packages contain administration tools and the xend service for managing the kernel-xen kernel for virtualization on Red Hat Enterprise Linux.

An out-of-bounds memory access flaw was found in the way QEMU's virtual Floppy Disk Controller (FDC) handled FIFO buffer access while processing certain FDC commands. A privileged guest user could use this flaw to crash the guest or, potentially, execute arbitrary code on the host with the privileges of the host's QEMU process corresponding to the guest. (CVE-2015-3456)

Red Hat would like to thank Jason Geffner of CrowdStrike for reporting this issue.

All xen users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the updated packages, all running fully-virtualized guests must be restarted for this update to take effect.

Updated kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems.

An out-of-bounds memory access flaw was found in the way QEMU's virtual Floppy Disk Controller (FDC) handled FIFO buffer access while processing certain FDC commands. A privileged guest user could use this flaw to crash the guest or, potentially, execute arbitrary code on the host with the privileges of the host's QEMU process corresponding to the guest. (CVE-2015-3456)

Red Hat would like to thank Jason Geffner of CrowdStrike for reporting this issue.

All kvm users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. Note: The procedure in the Solution section must be performed before this update will take effect.

Several vulnerabilities were discovered in the qemu virtualisation solution :

  - CVE-2014-9718     It was discovered that the IDE controller emulation is     susceptible to denial of service.

  - CVE-2015-1779     Daniel P. Berrange discovered a denial of service     vulnerability in the VNC web socket decoder.

  - CVE-2015-2756     Jan Beulich discovered that unmediated PCI command     register could result in denial of service.

  - CVE-2015-3456     Jason Geffner discovered a buffer overflow in the     emulated floppy disk drive, resulting in the potential     execution of arbitrary code.

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm package provides the user-space component for running virtual machines using KVM.

An out-of-bounds memory access flaw was found in the way QEMU's virtual Floppy Disk Controller (FDC) handled FIFO buffer access while processing certain FDC commands. A privileged guest user could use this flaw to crash the guest or, potentially, execute arbitrary code on the host with the privileges of the host's QEMU process corresponding to the guest. (CVE-2015-3456)

Red Hat would like to thank Jason Geffner of CrowdStrike for reporting this issue.

All qemu-kvm users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1002 advisory.

  - The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest     users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary     code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands,     aka VENOM. (CVE-2015-3456)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - force the fifo access to be in bounds of the allocated     buffer This is XSA-133. [bug 21078975] (CVE-2015-3456)

Qemu was updated to v2.1.3: See http://wiki.qemu-project.org/ChangeLog/2.1 for more information.

This update includes a security fix :

  - CVE-2015-3456: Fixed a buffer overflow in the floppy     drive emulation, which could be used to denial of     service attacks or potential code execution against the     host.

The remote host is affected by the vulnerability described in GLSA-201612-27 (VirtualBox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in VirtualBox. Please       review the CVE identifiers referenced below for details.
  Impact :

    Local attackers could cause a Denial of Service condition, execute       arbitrary code, or escalate their privileges.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of qemu-kvm which is vulnerable to an out-of-bounds memory access flaw, which can cause a crash or execution of arbitrary code on the host.

The remote host is running a version of VirtualBox which is vulnerable to an out-of-bounds memory access flaw, which can cause a crash or execution of arbitrary code on the host.

The remote host is running a version of xen which is vulnerable to an out-of-bounds memory access flaw, which can cause a crash or execution of arbitrary code on the host.

The remote host is running a version of qemu-kvm-rhev which is vulnerable to an out-of-bounds memory access flaw, which can cause a crash or execution of arbitrary code on the host.

The remote host is running a version of kvm which is vulnerable to an out-of-bounds memory access flaw, which can cause a crash or execution of arbitrary code on the host.

ID	Name	Product	Family	Published	Updated	Severity
83420	CentOS 5 : xen (CESA-2015:1002) (Venom)	Nessus	CentOS Local Security Checks	5/13/2015	9/28/2023	high
83421	CentOS 5 : kvm (CESA-2015:1003) (Venom)	Nessus	CentOS Local Security Checks	5/13/2015	9/28/2023	high
83422	Debian DSA-3259-1 : qemu - security update (Venom)	Nessus	Debian Local Security Checks	5/13/2015	9/28/2023	high
83426	RHEL 7 : qemu-kvm (RHSA-2015:0999) (Venom)	Nessus	Red Hat Local Security Checks	5/13/2015	9/28/2023	high
83446	Oracle Linux 5 : xen (ELSA-2015-1002)	Nessus	Oracle Linux Local Security Checks	5/14/2015	1/16/2024	high
83484	OracleVM 2.2 : xen (OVMSA-2015-0059) (Venom)	Nessus	OracleVM Local Security Checks	5/15/2015	1/4/2021	high
83534	openSUSE Security Update : qemu (openSUSE-2015-364) (Venom)	Nessus	SuSE Local Security Checks	5/19/2015	9/28/2023	high
95695	GLSA-201612-27 : VirtualBox: Multiple vulnerabilities (Venom)	Nessus	Gentoo Local Security Checks	12/12/2016	1/11/2021	medium
801941	qemu-kvm < 1.5.3-86 el6 Venom Vulnerability	Log Correlation Engine	Generic			high
801944	VirtualBox < 4.3-4.3.28 Venom Vulnerability	Log Correlation Engine	Generic			high
801939	xen < 3.0.3-146 Venom Vulnerability	Log Correlation Engine	Generic			high
801942	qemu-kvm-rhev < 2.1.2-23 el7 Venom Vulnerability	Log Correlation Engine	Generic			high
801940	qemu-kvm < 0.12.1.2-2.448 el6 Venom Vulnerability	Log Correlation Engine	Generic			high
801943	kvm < 83-272 el5+ Venom Vulnerability	Log Correlation Engine	Generic			high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

medium

high

high

high

high

high

high