Test ID:	1.3.6.1.4.1.25623.1.0.69739
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2241-1)
Summary:	The remote host is missing an update for the Debian 'qemu-kvm' package(s) announced via the DSA-2241-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'qemu-kvm' package(s) announced via the DSA-2241-1 advisory. Vulnerability Insight: Nelson Elhage discovered that incorrect memory handling during the removal of ISA devices in KVM, a solution for full virtualization on x86 hardware, could lead to denial of service or the execution of arbitrary code. For the stable distribution (squeeze), this problem has been fixed in version 0.12.5+dfsg-5+squeeze2. For the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your qemu-kvm packages. Affected Software/OS: 'qemu-kvm' package(s) on Debian 6. Solution: Please install the updated package(s). CVSS Score: 7.4 CVSS Vector: AV:A/AC:M/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1751 44393 http://secunia.com/advisories/44393 44458 http://secunia.com/advisories/44458 44648 http://secunia.com/advisories/44648 44658 http://secunia.com/advisories/44658 44660 http://secunia.com/advisories/44660 44900 http://secunia.com/advisories/44900 47927 http://www.securityfocus.com/bid/47927 73395 http://www.osvdb.org/73395 RHSA-2011:0534 http://rhn.redhat.com/errata/RHSA-2011-0534.html SUSE-SU-2011:0533 https://hermes.opensuse.org/messages/8572547 USN-1145-1 https://www.ubuntu.com/usn/USN-1145-1/ [Qemu-devel] 20110519 [PATCH] Ignore pci unplug requests for unpluggable devices http://lists.nongnu.org/archive/html/qemu-devel/2011-05/msg01810.html [oss-security] 20110519 CVE-2011-1751 qemu: acpi_piix4: missing hotplug check during device removal http://www.openwall.com/lists/oss-security/2011/05/19/2 http://blog.nelhage.com/2011/08/breaking-out-of-kvm/ http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commit%3Bh=505597e4476a6bc219d0ec1362b760d71cb4fdca https://bugzilla.redhat.com/show_bug.cgi?id=699773 https://github.com/nelhage/virtunoid openSUSE-SU-2011:0510 http://lists.opensuse.org/opensuse-updates/2011-05/msg00043.html
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.