RHSA-2011:0919High
Red Hat Security Advisory: qemu-kvm security and bug fix update
🔗 CVE IDs covered (2)
📋 Description
CVE-2011-2212 — qemu-kvm: virtqueue: too-large indirect descriptor buffer overflow CVE-2011-2512 — qemu-kvm: OOB memory access caused by negative vq notifies
🎯 Affected products6
- Red Hat Enterprise Linux Server (v. 6)
- qemu-img-2:0.12.1.2-2.160.el6_1.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
- qemu-kvm-2:0.12.1.2-2.160.el6_1.2.src as a component of Red Hat Enterprise Linux Server (v. 6)
- qemu-kvm-2:0.12.1.2-2.160.el6_1.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
- qemu-kvm-debuginfo-2:0.12.1.2-2.160.el6_1.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
- qemu-kvm-tools-2:0.12.1.2-2.160.el6_1.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
✅ Remediation
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2011:0919
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=713589
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=717399
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0919.json