Test ID:	1.3.6.1.4.1.25623.1.0.882539
Category:	CentOS Local Security Checks
Title:	CentOS Update for qemu-guest-agent CESA-2016:1585 centos6
Summary:	Check the version of qemu-guest-agent
Description:	Summary: Check the version of qemu-guest-agent Vulnerability Insight: KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm packages provide the user-space component for running virtual machines using KVM. Security Fix(es): * Quick emulator(Qemu) built with the virtio framework is vulnerable to an unbounded memory allocation issue. It was found that a malicious guest user could submit more requests than the virtqueue size permits. Processing a request allocates a VirtQueueElement and therefore causes unbounded memory allocation on the host controlled by the guest. (CVE-2016-5403) Red Hat would like to thank hongzhenhao (Marvel Team) for reporting this issue. Affected Software/OS: qemu-guest-agent on CentOS 6 Solution: Please Install the Updated Packages. CVSS Score: 4.9 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5403 1036476 http://www.securitytracker.com/id/1036476 92148 http://www.securityfocus.com/bid/92148 RHSA-2016:1585 http://rhn.redhat.com/errata/RHSA-2016-1585.html RHSA-2016:1586 http://rhn.redhat.com/errata/RHSA-2016-1586.html RHSA-2016:1606 http://rhn.redhat.com/errata/RHSA-2016-1606.html RHSA-2016:1607 http://rhn.redhat.com/errata/RHSA-2016-1607.html RHSA-2016:1652 http://rhn.redhat.com/errata/RHSA-2016-1652.html RHSA-2016:1653 http://rhn.redhat.com/errata/RHSA-2016-1653.html RHSA-2016:1654 http://rhn.redhat.com/errata/RHSA-2016-1654.html RHSA-2016:1655 http://rhn.redhat.com/errata/RHSA-2016-1655.html RHSA-2016:1756 http://rhn.redhat.com/errata/RHSA-2016-1756.html RHSA-2016:1763 http://rhn.redhat.com/errata/RHSA-2016-1763.html RHSA-2016:1943 http://rhn.redhat.com/errata/RHSA-2016-1943.html USN-3047-1 http://www.ubuntu.com/usn/USN-3047-1 USN-3047-2 http://www.ubuntu.com/usn/USN-3047-2 [debian-lts-announce] 20190920 [SECURITY] [DLA 1927-1] qemu security update https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://xenbits.xen.org/xsa/advisory-184.html https://bugzilla.redhat.com/show_bug.cgi?id=1358359
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.