Executive Summary

Informations
NameMDVSA-2015:210First vendor Publication2015-04-27
VendorMandrivaLast vendor Modification2015-04-27
Severity (Vendor) N/ARevisionN/A

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score7.8Attack RangeNetwork
Cvss Impact Score6.9Attack ComplexityLow
Cvss Expoit Score10AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Updated qemu packages fix security vulnerabilities:

A denial of service flaw was found in the way QEMU handled malformed Physical Region Descriptor Table (PRDT) data sent to the host's IDE and/or AHCI controller emulation. A privileged guest user could use this flaw to crash the system (rhbz#1204919).

It was found that the QEMU's websocket frame decoder processed incoming frames without limiting resources used to process the header and the payload. An attacker able to access a guest's VNC console could use this flaw to trigger a denial of service on the host by exhausting all available memory and CPU (CVE-2015-1779).

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2015:210

CWE : Common Weakness Enumeration

%idName
100 %CWE-399Resource Management Errors

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1
Os4
Os2
Os2
Os2
Os1
Os1
Os1

Nessus® Vulnerability Scanner

DateDescription
2016-12-05Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_a228c7a0ba6611e6b1cf14dae9d210b8.nasl - Type : ACT_GATHER_INFO
2016-05-19Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-1318-1.nasl - Type : ACT_GATHER_INFO
2016-04-13Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-439.nasl - Type : ACT_GATHER_INFO
2016-04-07Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-0955-1.nasl - Type : ACT_GATHER_INFO
2016-04-01Name : The remote openSUSE host is missing a security update.
File : openSUSE-2016-413.nasl - Type : ACT_GATHER_INFO
2016-03-25Name : The remote SUSE host is missing one or more security updates.
File : suse_SU-2016-0873-1.nasl - Type : ACT_GATHER_INFO
2016-02-05Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201602-01.nasl - Type : ACT_GATHER_INFO
2015-10-29Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2015-1943.nasl - Type : ACT_GATHER_INFO
2015-10-28Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2015-1943.nasl - Type : ACT_GATHER_INFO
2015-10-28Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2015-1943.nasl - Type : ACT_GATHER_INFO
2015-10-28Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20151027_qemu_kvm_on_SL7_x.nasl - Type : ACT_GATHER_INFO
2015-05-14Name : The remote SuSE 11 host is missing a security update.
File : suse_11_kvm-150428.nasl - Type : ACT_GATHER_INFO
2015-05-13Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-2608-1.nasl - Type : ACT_GATHER_INFO
2015-05-13Name : The remote Debian host is missing a security-related update.
File : debian_DSA-3259.nasl - Type : ACT_GATHER_INFO
2015-04-28Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2015-210.nasl - Type : ACT_GATHER_INFO
2015-04-22Name : The remote Fedora host is missing a security update.
File : fedora_2015-5541.nasl - Type : ACT_GATHER_INFO
2015-04-14Name : The remote Fedora host is missing a security update.
File : fedora_2015-5482.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
DateInformations
2016-01-20 21:26:01
  • Multiple Updates
2016-01-15 21:28:41
  • Multiple Updates
2016-01-13 00:27:01
  • Multiple Updates
2015-04-29 13:28:50
  • Multiple Updates
2015-04-27 13:28:57
  • First insertion