Search 211766 CVE descriptions
and 97459 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:
Category:SuSE Local Security Checks
Title:SUSE: Security Advisory (SUSE-SU-2015:0357-1)
Summary:The remote host is missing an update for the 'kvm and libvirt' package(s) announced via the SUSE-SU-2015:0357-1 advisory.
The remote host is missing an update for the 'kvm and libvirt' package(s) announced via the SUSE-SU-2015:0357-1 advisory.

Vulnerability Insight:
This collective update for KVM and libvirt provides fixes for security and non-security issues.


* Fix NULL pointer dereference because of uninitialized UDP socket.
(bsc#897654, CVE-2014-3640)
* Fix performance degradation after migration. (bsc#878350)
* Fix potential image corruption due to missing FIEMAP_FLAG_SYNC flag
in FS_IOC_FIEMAP ioctl. (bsc#908381)
* Add validate hex properties for qdev. (bsc#852397)
* Add boot option to do strict boot (bsc#900084)
* Add query-command-line-options QMP command. (bsc#899144)
* Fix incorrect return value of migrate_cancel. (bsc#843074)
* Fix insufficient parameter validation during ram load. (bsc#905097,
* Fix insufficient blit region checks in qemu/cirrus. (bsc#907805,


* Fix security hole with migratable flag in dumpxml. (bsc#904176,
* Fix domain deadlock. (bsc#899484, CVE-2014-3657)
* Use correct definition when looking up disk in qemu blkiotune.
(bsc#897783, CVE-2014-3633)
* Fix undefined symbol when starting virtlockd. (bsc#910145)
* Add '-boot strict' to qemu's commandline whenever possible.
* Add support for 'reboot-timeout' in qemu. (bsc#899144)
* Increase QEMU's monitor timeout to 30sec. (bsc#911742)
* Allow setting QEMU's migration max downtime any time. (bsc#879665)

Security Issues:

* CVE-2014-7823
* CVE-2014-3657
* CVE-2014-3633
* CVE-2014-3640
* CVE-2014-7840
* CVE-2014-8106

Affected Software/OS:
'kvm and libvirt' package(s) on SUSE Linux Enterprise Software Development Kit 11 SP3, SUSE Linux Enterprise Server 11 SP3, SUSE Linux Enterprise Desktop 11 SP3

Please install the updated package(s).

CVSS Score:

CVSS Vector:

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2014-3633
Debian Security Information: DSA-3038 (Google Search)
RedHat Security Advisories: RHSA-2014:1352
SuSE Security Announcement: openSUSE-SU-2014:1290 (Google Search)
SuSE Security Announcement: openSUSE-SU-2014:1293 (Google Search)
Common Vulnerability Exposure (CVE) ID: CVE-2014-3640
Debian Security Information: DSA-3044 (Google Search)
Debian Security Information: DSA-3045 (Google Search)
RedHat Security Advisories: RHSA-2015:0349
RedHat Security Advisories: RHSA-2015:0624
Common Vulnerability Exposure (CVE) ID: CVE-2014-3657
Common Vulnerability Exposure (CVE) ID: CVE-2014-7823
SuSE Security Announcement: openSUSE-SU-2014:1471 (Google Search)
Common Vulnerability Exposure (CVE) ID: CVE-2014-7840
XForce ISS Database: qemu-cve20147840-code-exec(99194)
Common Vulnerability Exposure (CVE) ID: CVE-2014-8106
BugTraq ID: 71477
Debian Security Information: DSA-3087 (Google Search)
Debian Security Information: DSA-3088 (Google Search)
RedHat Security Advisories: RHSA-2015:0643
RedHat Security Advisories: RHSA-2015:0795
RedHat Security Advisories: RHSA-2015:0867
RedHat Security Advisories: RHSA-2015:0868
RedHat Security Advisories: RHSA-2015:0891
XForce ISS Database: qemu-cve20148106-sec-bypass(99126)
CopyrightCopyright (C) 2021 Greenbone Networks GmbH

This is only one of 97459 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

© 1998-2021 E-Soft Inc. All rights reserved.