Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=238723
Summary: CVE-2007-13{20-23}, CVE-2007-1366: qemu multiple vulnerabilities Product: Fedora Extras Version: fc6 Platform: All URL: http://www.vuxml.org/freebsd/0ac89b39-f829-11db-b55c- 000e0c6d38a9.html OS/Version: Linux Status: NEW Severity: medium Priority: medium Component: qemu AssignedTo: dwmw2@redhat.com ReportedBy: ville.skytta@iki.fi QAContact: extras-qa@fedoraproject.org CC: fedora-security-list@redhat.com,j.w.r.degoede@hhs.nl
Not sure if these affect any qemu versions in Fedora, but here goes:
http://www.vuxml.org/freebsd/0ac89b39-f829-11db-b55c-000e0c6d38a9.html
"Several vulnerabilities have been discovered in the QEMU processor emulator, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems:
CVE-2007-1320 Tavis Ormandy discovered that a memory management routine of the Cirrus video driver performs insufficient bounds checking, which might allow the execution of arbitrary code through a heap overflow.
CVE-2007-1321 Tavis Ormandy discovered that the NE2000 network driver and the socket code perform insufficient input validation, which might allow the execution of arbitrary code through a heap overflow.
CVE-2007-1322 Tavis Ormandy discovered that the "icebp" instruction can be abused to terminate the emulation, resulting in denial of service.
CVE-2007-1323 Tavis Ormandy discovered that the NE2000 network driver and the socket code perform insufficient input validation, which might allow the execution of arbitrary code through a heap overflow.
CVE-2007-1366 Tavis Ormandy discovered that the "aam" instruction can be abused to crash qemu through a division by zero, resulting in denial of service."
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2007-13{20-23}, CVE-2007-1366: qemu multiple vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=238723
bugzilla@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Product|Fedora Extras |Fedora
clalance@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |MODIFIED
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2007-13{20-23}, CVE-2007-1366: qemu multiple vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=238723
clalance@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|dwmw2@redhat.com |clalance@redhat.com Status|MODIFIED |ASSIGNED Component|qemu |xen
------- Additional Comments From clalance@redhat.com 2007-09-26 13:41 EST ------- Ug. I made a mistake, and thought this bug was for xen. We have the same problem in FC-6 for Xen, so I'm going to change this one to Xen, and then clone it for Qemu, so we continue to track for that.
Chris Lalancette
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2007-13{20-23}, CVE-2007-1366: qemu multiple vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=238723
clalance@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- OtherBugsDependingO| |307471 nThis| |
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2007-13{20-23}, CVE-2007-1366: qemu multiple vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=238723
clalance@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |MODIFIED
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2007-13{20-23}, CVE-2007-1366: qemu multiple vulnerabilities
https://bugzilla.redhat.com/show_bug.cgi?id=238723
bugzilla@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Version|fc6 |6
berrange@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |CLOSED Resolution| |WONTFIX
------- Additional Comments From berrange@redhat.com 2008-03-19 20:22 EST ------- Fedora Core 6 is end of life and will not receive further updates
security@lists.fedoraproject.org