Contact | Site en Français               

 


 

Vulnerabilities & Threats

 
  VUPEN Security Advisories
  Linux Security Advisories

  Malware Advisories

  Security Research
  Threat Watch Blog
  Zero-Day Monitor
  Search Engine
  Mailing List & RSS
 
   

>> Mandriva Security Update Fixes Qemu Multiple Vulnerabilities

Title : Mandriva Security Update Fixes Qemu Multiple Vulnerabilities
VUPEN ID : VUPEN/ADV-2008-2329
CVE ID : CVE-2007-1320 - CVE-2007-1321 - CVE-2007-1322 - CVE-2007-1366 - CVE-2007-5729 - CVE-2007-5730 - CVE-2007-6227 - CVE-2008-0928 - CVE-2008-1945 - CVE-2008-2004
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2008-08-11


Technical Description    Receive VUPEN Security alerts in a Text format  Receive VUPEN Security alerts in a PDF format  Receive VUPEN Security alerts in an XML format 

Multiple vulnerabilities have been identified in Mandriva, which could be exploited by attackers to bypass security restrictions, cause a denial of service or execute arbitrary code. These issues are caused by errors in QEMU. For additional information, see : VUPEN/ADV-2007-1597

Affected Products

Mandriva Linux 2008.0
Mandriva Linux 2008.1

Solution

Upgrade the affected packages :

Mandriva Linux 2008.0:
702e54aaf211941953f9aab4aef4f463 2008.0/i586/dkms-kqemu-1.3.0-0.pre11.13.2mdv2008.0.i586.rpm
b1d7cb1057953d7c63c528fdf1034b3a 2008.0/i586/qemu-0.9.0-16.2mdv2008.0.i586.rpm
f1b73fffef10c952f641d922ad626dd4 2008.0/i586/qemu-img-0.9.0-16.2mdv2008.0.i586.rpm
396f94f5b918a8a71d3a6575a9f5ca0b 2008.0/SRPMS/qemu-0.9.0-16.2mdv2008.0.src.rpm

Mandriva Linux 2008.0/X86_64:
f767f76399a5994234d697dbc3f7926a 2008.0/x86_64/dkms-kqemu-1.3.0-0.pre11.13.2mdv2008.0.x86_64.rpm
1e2613cc2158e1c30563585e16857e8c 2008.0/x86_64/qemu-0.9.0-16.2mdv2008.0.x86_64.rpm
63522aa3e6740fbed3b222e71018ffcd 2008.0/x86_64/qemu-img-0.9.0-16.2mdv2008.0.x86_64.rpm
396f94f5b918a8a71d3a6575a9f5ca0b 2008.0/SRPMS/qemu-0.9.0-16.2mdv2008.0.src.rpm

Mandriva Linux 2008.1:
1079fe4cb3f742411a2593f2aaed799c 2008.1/i586/dkms-kqemu-1.3.0-0.pre11.15.2mdv2008.1.i586.rpm
7e999da7698373e37e40866b32703a75 2008.1/i586/qemu-0.9.0-18.2mdv2008.1.i586.rpm
e85fc2c051a7297488fa85d4ec8a7498 2008.1/i586/qemu-img-0.9.0-18.2mdv2008.1.i586.rpm
0495e75ea6296856fb24a3eaea8add4b 2008.1/SRPMS/qemu-0.9.0-18.2mdv2008.1.src.rpm

Mandriva Linux 2008.1/X86_64:
0a06c81553ad1068570c3e6d12a1d47a 2008.1/x86_64/dkms-kqemu-1.3.0-0.pre11.15.2mdv2008.1.x86_64.rpm
04579bc4358470ddb829be94dcd39db0 2008.1/x86_64/qemu-0.9.0-18.2mdv2008.1.x86_64.rpm
c4dd1da01c083fcbb72281e2d37470c4 2008.1/x86_64/qemu-img-0.9.0-18.2mdv2008.1.x86_64.rpm
0495e75ea6296856fb24a3eaea8add4b 2008.1/SRPMS/qemu-0.9.0-18.2mdv2008.1.src.rpm

References

http://www.vupen.com/english/advisories/2008/2329
http://archives.mandrivalinux.com/security-announce/2008-08/msg00002.php

ChangeLog

2008-08-11 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.

 

Vulnerability Alerting

Free 14-Day Trial

 
  Latest News

 

  >> 2009-07-06

     

  Microsoft Windows 0-Day
  Flaw Exploited in the Wild


  >> 2009-06-10

     

  VUPEN Security Research
  Discovered Critical Flaws
  in Adobe Acrobat and MS

  Office Word


  >> 2009-06-02

     

  VUPEN Security Research
  Discovered Critical Flaws
  in ACDSee Products


  >> 2009-05-22

     

  VUPEN Discovered Two
  Critical Vulnerabilities in
  Novell GroupWise 8 / 7

 

 

More Informations    
    








Copyright 2003-2009 © VUPEN.COM - Privacy Policy