Test Kennung:	1.3.6.1.4.1.25623.1.0.882196
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for qemu-guest-agent CESA-2015:1087 centos6
Zusammenfassung:	Check the version of qemu-guest-agent
Beschreibung:	Summary: Check the version of qemu-guest-agent Vulnerability Insight: KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm package provides the user-space component for running virtual machines using KVM. A flaw was found in the way QEMU's AMD PCnet Ethernet emulation handled multi-TMD packets with a length above 4096 bytes. A privileged guest user in a guest with an AMD PCNet ethernet card enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the hosting QEMU process. (CVE-2015-3209) Red Hat would like to thank Matt Tait of Google's Project Zero security team for reporting this issue. All qemu-kvm users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect. Affected Software/OS: qemu-guest-agent on CentOS 6 Solution: Please install the updated packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3209 1032545 http://www.securitytracker.com/id/1032545 75123 http://www.securityfocus.com/bid/75123 DSA-3284 http://www.debian.org/security/2015/dsa-3284 DSA-3285 http://www.debian.org/security/2015/dsa-3285 DSA-3286 http://www.debian.org/security/2015/dsa-3286 FEDORA-2015-10001 http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160669.html FEDORA-2015-9965 http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html FEDORA-2015-9978 http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160677.html GLSA-201510-02 https://security.gentoo.org/glsa/201510-02 GLSA-201604-03 https://security.gentoo.org/glsa/201604-03 RHSA-2015:1087 http://rhn.redhat.com/errata/RHSA-2015-1087.html RHSA-2015:1088 http://rhn.redhat.com/errata/RHSA-2015-1088.html RHSA-2015:1089 http://rhn.redhat.com/errata/RHSA-2015-1089.html RHSA-2015:1189 http://rhn.redhat.com/errata/RHSA-2015-1189.html SUSE-SU-2015:1042 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html SUSE-SU-2015:1045 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html SUSE-SU-2015:1152 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00027.html SUSE-SU-2015:1156 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html SUSE-SU-2015:1157 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html SUSE-SU-2015:1206 http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00014.html SUSE-SU-2015:1426 http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html SUSE-SU-2015:1519 http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html SUSE-SU-2015:1643 http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html USN-2630-1 http://www.ubuntu.com/usn/USN-2630-1 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 http://xenbits.xen.org/xsa/advisory-135.html https://kb.juniper.net/JSA10783 https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.