Test Kennung:	1.3.6.1.4.1.25623.1.0.703471
Kategorie:	Debian Local Security Checks
Titel:	Debian Security Advisory DSA 3471-1 (qemu - security update)
Zusammenfassung:	Several vulnerabilities were discovered in;qemu, a full virtualization solution on x86 hardware.;;CVE-2015-7295;Jason Wang of Red Hat Inc. discovered that the Virtual Network;Device support is vulnerable to denial-of-service, that could;occur when receiving large packets.;;CVE-2015-7504;Qinghao Tang of Qihoo 360 Inc. and Ling Liu of Qihoo 360 Inc.;discovered that the PC-Net II ethernet controller is vulnerable to;a heap-based buffer overflow that could result in;denial-of-service (via application crash) or arbitrary code;execution.;;Description truncated. Please see the references for more information.
Beschreibung:	Summary: Several vulnerabilities were discovered in qemu, a full virtualization solution on x86 hardware. CVE-2015-7295 Jason Wang of Red Hat Inc. discovered that the Virtual Network Device support is vulnerable to denial-of-service, that could occur when receiving large packets. CVE-2015-7504 Qinghao Tang of Qihoo 360 Inc. and Ling Liu of Qihoo 360 Inc. discovered that the PC-Net II ethernet controller is vulnerable to a heap-based buffer overflow that could result in denial-of-service (via application crash) or arbitrary code execution. Description truncated. Please see the references for more information. Affected Software/OS: qemu on Debian Linux Solution: For the stable distribution (jessie), these problems have been fixed in version 1:2.1+dfsg-12+deb8u5a. We recommend that you upgrade your qemu packages. CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7295 BugTraq ID: 82672 http://www.securityfocus.com/bid/82672 Debian Security Information: DSA-3469 (Google Search) http://www.debian.org/security/2016/dsa-3469 Debian Security Information: DSA-3470 (Google Search) http://www.debian.org/security/2016/dsa-3470 Debian Security Information: DSA-3471 (Google Search) http://www.debian.org/security/2016/dsa-3471 http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169802.html http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169624.html http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169767.html https://security.gentoo.org/glsa/201602-01 http://www.openwall.com/lists/oss-security/2015/09/18/5 http://www.openwall.com/lists/oss-security/2015/09/18/9 Common Vulnerability Exposure (CVE) ID: CVE-2015-7504 BugTraq ID: 78227 http://www.securityfocus.com/bid/78227 https://security.gentoo.org/glsa/201604-03 https://lists.gnu.org/archive/html/qemu-devel/2015-11/msg06342.html http://www.openwall.com/lists/oss-security/2015/11/30/2 RedHat Security Advisories: RHSA-2015:2694 http://rhn.redhat.com/errata/RHSA-2015-2694.html RedHat Security Advisories: RHSA-2015:2695 http://rhn.redhat.com/errata/RHSA-2015-2695.html RedHat Security Advisories: RHSA-2015:2696 http://rhn.redhat.com/errata/RHSA-2015-2696.html http://www.securitytracker.com/id/1034268 Common Vulnerability Exposure (CVE) ID: CVE-2015-7512 BugTraq ID: 78230 http://www.securityfocus.com/bid/78230 http://www.openwall.com/lists/oss-security/2015/11/30/3 http://www.securitytracker.com/id/1034527 Common Vulnerability Exposure (CVE) ID: CVE-2015-7549 BugTraq ID: 80761 http://www.securityfocus.com/bid/80761 http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175380.html http://www.openwall.com/lists/oss-security/2015/12/14/2 Common Vulnerability Exposure (CVE) ID: CVE-2015-8345 BugTraq ID: 77985 http://www.securityfocus.com/bid/77985 http://www.openwall.com/lists/oss-security/2015/11/25/11 https://lists.gnu.org/archive/html/qemu-devel/2015-10/msg03911.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8504 BugTraq ID: 78708 http://www.securityfocus.com/bid/78708 http://www.openwall.com/lists/oss-security/2015/12/08/7 Common Vulnerability Exposure (CVE) ID: CVE-2015-8550 BugTraq ID: 79592 http://www.securityfocus.com/bid/79592 Debian Security Information: DSA-3434 (Google Search) http://www.debian.org/security/2016/dsa-3434 Debian Security Information: DSA-3519 (Google Search) http://www.debian.org/security/2016/dsa-3519 http://www.securitytracker.com/id/1034479 SuSE Security Announcement: SUSE-SU-2016:0911 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html SuSE Security Announcement: SUSE-SU-2016:1102 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html SuSE Security Announcement: SUSE-SU-2016:1764 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8558 BugTraq ID: 80694 http://www.securityfocus.com/bid/80694 http://www.openwall.com/lists/oss-security/2015/12/14/9 http://www.openwall.com/lists/oss-security/2015/12/14/16 https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02124.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8567 BugTraq ID: 79721 http://www.securityfocus.com/bid/79721 http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176558.html http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176300.html http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175967.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176503.html http://www.openwall.com/lists/oss-security/2015/12/15/10 https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02299.html SuSE Security Announcement: SUSE-SU-2016:0873 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html SuSE Security Announcement: SUSE-SU-2016:0955 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html SuSE Security Announcement: SUSE-SU-2016:1318 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html SuSE Security Announcement: SUSE-SU-2016:1560 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html SuSE Security Announcement: SUSE-SU-2016:1703 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html SuSE Security Announcement: openSUSE-SU-2016:0123 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html SuSE Security Announcement: openSUSE-SU-2016:0126 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html SuSE Security Announcement: openSUSE-SU-2016:1750 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html http://www.ubuntu.com/usn/USN-2891-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-8568 Common Vulnerability Exposure (CVE) ID: CVE-2015-8613 BugTraq ID: 79719 http://www.securityfocus.com/bid/79719 https://security.gentoo.org/glsa/201604-01 http://www.openwall.com/lists/oss-security/2015/12/22/1 https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg03737.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8619 BugTraq ID: 79668 http://www.securityfocus.com/bid/79668 http://www.openwall.com/lists/oss-security/2015/12/23/1 https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02930.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8743 BugTraq ID: 79820 http://www.securityfocus.com/bid/79820 http://www.openwall.com/lists/oss-security/2016/01/04/1 http://www.openwall.com/lists/oss-security/2016/01/04/2 https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg00050.html http://www.securitytracker.com/id/1034574 Common Vulnerability Exposure (CVE) ID: CVE-2015-8744 BugTraq ID: 79821 http://www.securityfocus.com/bid/79821 http://www.openwall.com/lists/oss-security/2016/01/04/3 http://www.openwall.com/lists/oss-security/2016/01/04/6 http://www.securitytracker.com/id/1034576 Common Vulnerability Exposure (CVE) ID: CVE-2015-8745 BugTraq ID: 79822 http://www.securityfocus.com/bid/79822 http://www.openwall.com/lists/oss-security/2016/01/04/4 http://www.openwall.com/lists/oss-security/2016/01/04/7 http://www.securitytracker.com/id/1034575 Common Vulnerability Exposure (CVE) ID: CVE-2016-1568 BugTraq ID: 80191 http://www.securityfocus.com/bid/80191 http://www.openwall.com/lists/oss-security/2016/01/09/1 http://www.openwall.com/lists/oss-security/2016/01/09/2 RedHat Security Advisories: RHSA-2016:0084 http://rhn.redhat.com/errata/RHSA-2016-0084.html RedHat Security Advisories: RHSA-2016:0086 http://rhn.redhat.com/errata/RHSA-2016-0086.html RedHat Security Advisories: RHSA-2016:0087 http://rhn.redhat.com/errata/RHSA-2016-0087.html RedHat Security Advisories: RHSA-2016:0088 http://rhn.redhat.com/errata/RHSA-2016-0088.html http://www.securitytracker.com/id/1034859 Common Vulnerability Exposure (CVE) ID: CVE-2016-1714 BugTraq ID: 80250 http://www.securityfocus.com/bid/80250 https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg00428.html http://www.openwall.com/lists/oss-security/2016/01/11/7 http://www.openwall.com/lists/oss-security/2016/01/12/10 http://www.openwall.com/lists/oss-security/2016/01/12/11 RedHat Security Advisories: RHSA-2016:0081 http://rhn.redhat.com/errata/RHSA-2016-0081.html RedHat Security Advisories: RHSA-2016:0082 http://rhn.redhat.com/errata/RHSA-2016-0082.html RedHat Security Advisories: RHSA-2016:0083 http://rhn.redhat.com/errata/RHSA-2016-0083.html RedHat Security Advisories: RHSA-2016:0085 http://rhn.redhat.com/errata/RHSA-2016-0085.html http://www.securitytracker.com/id/1034858 Common Vulnerability Exposure (CVE) ID: CVE-2016-1922 BugTraq ID: 81058 http://www.securityfocus.com/bid/81058 http://www.openwall.com/lists/oss-security/2016/01/16/1 http://www.openwall.com/lists/oss-security/2016/01/16/6 https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg02812.html Common Vulnerability Exposure (CVE) ID: CVE-2016-1981 BugTraq ID: 81549 http://www.securityfocus.com/bid/81549 http://www.openwall.com/lists/oss-security/2016/01/19/10 http://www.openwall.com/lists/oss-security/2016/01/22/1 https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg03454.html RedHat Security Advisories: RHSA-2016:2585 http://rhn.redhat.com/errata/RHSA-2016-2585.html
Copyright	Copyright (C) 2016 Greenbone Networks GmbH http://greenbone.net

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.