Test ID:	1.3.6.1.4.1.25623.1.0.121261
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 201408-17
Summary:	Gentoo Linux Local Security Checks GLSA 201408-17
Description:	Summary: Gentoo Linux Local Security Checks GLSA 201408-17 Vulnerability Insight: Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details. Solution: Update the affected packages to the latest available version. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6227 BugTraq ID: 26666 http://www.securityfocus.com/bid/26666 Bugtraq: 20071130 QEMU code_gen_buffer overflow POC (Google Search) http://www.securityfocus.com/archive/1/484429/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2008:162 http://secunia.com/advisories/29129 XForce ISS Database: qemu-translationblock-dos(38806) https://exchange.xforce.ibmcloud.com/vulnerabilities/38806 Common Vulnerability Exposure (CVE) ID: CVE-2013-4377 55015 http://secunia.com/advisories/55015 USN-2092-1 http://www.ubuntu.com/usn/USN-2092-1 [Qemu-devel] 20130920 [PATCH 11/11] virtio-pci: add device_unplugged callback http://lists.nongnu.org/archive/html/qemu-devel/2013-09/msg03347.html [oss-security] 20130926 Re: CVE request: qemu host crash from within guest http://www.openwall.com/lists/oss-security/2013/09/26/5 https://bugzilla.redhat.com/show_bug.cgi?id=1012633 Common Vulnerability Exposure (CVE) ID: CVE-2013-4544 106013 http://www.osvdb.org/106013 58191 http://secunia.com/advisories/58191 USN-2182-1 http://ubuntu.com/usn/usn-2182-1 [qemu] 20140404 [PATCH V2 0/4] CVE-2013-4544 http://thread.gmane.org/gmane.comp.emulators.qemu/265562 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=3c99afc779c2c78718a565ad8c5e98de7c2c7484 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8c6c0478996e8f77374e69b6df68655b0b4ba689 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=9878d173f574df74bde0ff50b2f81009fbee81bb http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f12d048a523780dbda702027d4a91b62af1a08d7 https://bugzilla.redhat.com/show_bug.cgi?id=1087513 Common Vulnerability Exposure (CVE) ID: CVE-2014-0142 DSA-3044 http://www.debian.org/security/2014/dsa-3044 RHSA-2014:0420 http://rhn.redhat.com/errata/RHSA-2014-0420.html RHSA-2014:0421 http://rhn.redhat.com/errata/RHSA-2014-0421.html http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=8e53abbc20d08ae3ec30c2054e1161314ad9501d http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9302e863aa8baa5d932fc078967050c055fa1a7f https://bugzilla.redhat.com/show_bug.cgi?id=1078201 Common Vulnerability Exposure (CVE) ID: CVE-2014-0143 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=509a41bab5306181044b5fff02eadf96d9c8676a http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=6a83f8b5bec6f59e56cc49bd49e4c3f8f805d56f http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8f4754ede56e3f9ea3fd7207f4a7c4453e59285b http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=afbcc40bee4ef51731102d7d4b499ee12fc182e1 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=cab60de930684c33f67d4e32c7509b567f8c445b http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=db8a31d11d6a60f48d6817530640d75aa72a9a2f http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e3737b820b45e54b059656dc3f914f895ac7a88b https://bugzilla.redhat.com/show_bug.cgi?id=1079140 Common Vulnerability Exposure (CVE) ID: CVE-2014-0144 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=24342f2cae47d03911e346fe1e520b00dc2818e0 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=2d51c32c4b511db8bb9e58208f1e2c25e4c06c85 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=5dab2faddc8eaa1fb1abdbe2f502001fc13a1b21 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=63fa06dc978f3669dbfd9443b33cde9e2a7f4b41 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=6d4b9e55fc625514a38d27cff4b9933f617fa7dc http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7b103b36d6ef3b11827c203d3a793bf7da50ecd6 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=97f1c45c6f456572e5b504b8614e4a69e23b8e3a http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a1b3955c9415b1e767c130a2f59fee6aa28e575b http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ce48f2f441ca98885267af6fd636a7cb804ee646 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d65f97a82c4ed48374a764c769d4ba1ea9724e97 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f56b9bc3ae20fc93815b34aa022be919941406ce https://bugzilla.redhat.com/show_bug.cgi?id=1079240 https://www.vulnerabilitycenter.com/#%21vul=44767 Common Vulnerability Exposure (CVE) ID: CVE-2014-0145 [oss-security] 20140326 QEMU image format input validation fixes (multiple CVEs) http://www.openwall.com/lists/oss-security/2014/03/26/8 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c05e4667be91b46ab42b5a11babf8e84d476cc6b http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f0dce23475b5af5da6b17b97c1765271307734b6 http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=c165f7758009a4f793c1fc19ebb69cf55313450b https://bugzilla.redhat.com/show_bug.cgi?id=1078885 https://lists.gnu.org/archive/html/qemu-devel/2014-03/msg04994.html Common Vulnerability Exposure (CVE) ID: CVE-2014-0146 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=11b128f4062dd7f89b14abc8877ff20d41b28be9 https://bugzilla.redhat.com/show_bug.cgi?id=1078232 Common Vulnerability Exposure (CVE) ID: CVE-2014-0147 http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=246f65838d19db6db55bfb41117c35645a2c4789 https://bugzilla.redhat.com/show_bug.cgi?id=1078848 https://bugzilla.redhat.com/show_bug.cgi?id=1086717 Common Vulnerability Exposure (CVE) ID: CVE-2014-0150 57878 http://secunia.com/advisories/57878 DSA-2909 http://www.debian.org/security/2014/dsa-2909 DSA-2910 http://www.debian.org/security/2014/dsa-2910 http://www.ubuntu.com/usn/USN-2182-1 [Qemu-devel] 20140411 Re: [PATCH for-2.0] virtio-net: fix guest-triggerable buffer overrun http://article.gmane.org/gmane.comp.emulators.qemu/266768 [Qemu-devel] 20140411 [PATCH for-2.0] virtio-net: fix guest-triggerable buffer overrun http://thread.gmane.org/gmane.comp.emulators.qemu/266713 https://bugzilla.redhat.com/show_bug.cgi?id=1078846 Common Vulnerability Exposure (CVE) ID: CVE-2014-0222 67357 http://www.securityfocus.com/bid/67357 FEDORA-2014-6288 http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html FEDORA-2014-6970 http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134053.html SUSE-SU-2015:0929 http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html [Qemu-devel] 20140512 [PATCH 3/5] qcow1: Validate L2 table size (CVE-2014-0222) https://lists.gnu.org/archive/html/qemu-devel/2014-05/msg02155.html [Qemu-stable] 20140723 [ANNOUNCE] QEMU 1.7.2 Stable released http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html openSUSE-SU-2015:1965 http://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html Common Vulnerability Exposure (CVE) ID: CVE-2014-0223 67391 http://www.securityfocus.com/bid/67391 [Qemu-devel] 20140512 [PATCH 4/5] qcow1: Validate image size (CVE-2014-0223) https://lists.gnu.org/archive/html/qemu-devel/2014-05/msg02156.html Common Vulnerability Exposure (CVE) ID: CVE-2014-2894 57945 http://secunia.com/advisories/57945 66932 http://www.securityfocus.com/bid/66932 RHSA-2014:0704 http://rhn.redhat.com/errata/RHSA-2014-0704.html RHSA-2014:0743 http://rhn.redhat.com/errata/RHSA-2014-0743.html RHSA-2014:0744 http://rhn.redhat.com/errata/RHSA-2014-0744.html [Qemu-devel] 20140412 [PATCH for 2.0] ide: Correct improper smart self test c https://lists.nongnu.org/archive/html/qemu-devel/2014-04/msg02016.html [Qemu-devel] 20140414 Re: [PATCH for 2.0] ide: Correct improper smart self test c https://lists.nongnu.org/archive/html/qemu-devel/2014-04/msg02095.html https://lists.nongnu.org/archive/html/qemu-devel/2014-04/msg02152.html [oss-security] 20140415 CVE request Qemu: out of bounds buffer access, guest triggerable via IDE SMART http://www.openwall.com/lists/oss-security/2014/04/15/4 [oss-security] 20140418 Re: CVE request Qemu: out of bounds buffer access, guest triggerable via IDE SMART http://www.openwall.com/lists/oss-security/2014/04/18/5 Common Vulnerability Exposure (CVE) ID: CVE-2014-3461 [qemu-devel] 20140512 [PATCH] usb: fix up post load checks http://article.gmane.org/gmane.comp.emulators.qemu/272092
Copyright	Copyright (C) 2015 Eero Volotinen

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.