USN-2182-1

Dashboard / Vulnerabilities / USN-2182-1

USN-2182-1

Summary: qemu, qemu-kvm vulnerabilities

Details: Michael S. Tsirkin discovered that QEMU incorrectly handled vmxnet3 devices. A local guest could possibly use this issue to cause a denial of service, or possibly execute arbitrary code on the host. This issue only applied to Ubuntu 13.10 and Ubuntu 14.04 LTS. (CVE-2013-4544) Michael S. Tsirkin discovered that QEMU incorrectly handled virtio-net MAC addresses. A local guest could possibly use this issue to cause a denial of service, or possibly execute arbitrary code on the host. (CVE-2014-0150) Benoît Canet discovered that QEMU incorrectly handled SMART self-tests. A local guest could possibly use this issue to cause a denial of service, or possibly execute arbitrary code on the host. (CVE-2014-2894)

References: https://ubuntu.com/security/notices/USN-2182-1, https://ubuntu.com/security/CVE-2013-4544, https://ubuntu.com/security/CVE-2014-0150, https://ubuntu.com/security/CVE-2014-2894