Synopsis

Important: qemu-kvm-rhev security update

Type/Severity

Security Advisory: Important

Topic

Updated qemu-kvm-rhev packages that fix one security issue are now
available for Red Hat Enterprise Virtualization.

Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

KVM (Kernel-based Virtual Machine) is a full virtualization solution for
Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the
user-space component for running virtual machines using KVM.

An out-of-bounds read/write flaw was discovered in the way QEMU's Firmware
Configuration device emulation processed certain firmware configurations.
A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the
QEMU process instance or, potentially, execute arbitrary code on the host
with privileges of the QEMU process. (CVE-2016-1714)

Red Hat would like to thank Donghai Zhu of Alibaba for reporting this
issue.

All qemu-kvm-rhev users are advised to upgrade to these updated packages,
which contain a backported patch to correct this issue. After installing
this update, shut down all running virtual machines. Once all virtual
machines have shut down, start them again for this update to take effect.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Virtualization 3 for RHEL 6 x86_64

Fixes

• BZ - 1296060 - CVE-2016-1714 Qemu: nvram: OOB r/w access in processing firmware configurations

CVEs

• CVE-2016-1714

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Virtualization 3 for RHEL 6

SRPM
qemu-kvm-rhev-0.12.1.2-2.479.el6_7.4.src.rpm	SHA-256: 76fca2d185df9bb7891d9da7d26d3137ccf258dacb221c1831417f47337b074b
x86_64
qemu-img-rhev-0.12.1.2-2.479.el6_7.4.x86_64.rpm	SHA-256: 96882cc0e419838e92fb3c9989c06b8498821eb1be199ac62eb3d9c16abd1b04
qemu-kvm-rhev-0.12.1.2-2.479.el6_7.4.x86_64.rpm	SHA-256: bbad41249b409cd21d00d2b90aec96cf397b2b1625adf635dad9306f78b44826
qemu-kvm-rhev-debuginfo-0.12.1.2-2.479.el6_7.4.x86_64.rpm	SHA-256: 3c7836fa5d4390baeb0612672dee80354eef89758ff5c12d0d1f5ab2c4adf681
qemu-kvm-rhev-tools-0.12.1.2-2.479.el6_7.4.x86_64.rpm	SHA-256: efab3d39f9e0e97634d904cdc1e9c9478f0b7bfdee141c849f60c05416734ede