spice-server-0.12.4-13.AXS4.1
エラータID: AXSA:2016-468:02
リリース日:
2016/06/06 Monday - 22:51
題名:
spice-server-0.12.4-13.AXS4.1
影響のあるチャネル:
Asianux Server 4 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- 現時点では CVE-2016-0749, CVE-2016-2150 の情報が公開されておりません。CVE の情報が公開され次第情報をアップデートいたします。
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2016-0749
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.
CVE-2016-2150
SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
追加情報:
N/A
ダウンロード:
SRPMS
- spice-server-0.12.4-13.AXS4.1.src.rpm
MD5: 08049f18488aab69ccc774a1ac426a11
SHA-256: 285e1d1839c0262cf925bea3278962e767822a3708c69dea11c9d8af8e7c3060
Size: 1.75 MB
Asianux Server 4 for x86_64
- spice-server-0.12.4-13.AXS4.1.x86_64.rpm
MD5: d116ffed5ae41aa364ad0aa285932e2b
SHA-256: 9609e459df14ee8e91a373296bdac9da126c1ce22a55053ab1417bf5fdc22943
Size: 345.44 kB
English