QEMU KVM QXL Denial of Service Vulnerability

Bugtraq ID:	57637
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-0241
Remote:	Yes
Local:	No
Published:	Jan 30 2013 12:00AM
Updated:	Apr 10 2013 05:28PM
Credit:	Petr Matousek
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux Desktop 6 QEMU QEMU 0 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 CentOS CentOS 6
Not Vulnerable:

QEMU KVM QXL Denial of Service Vulnerability

QEMU KVM QXL is prone to a denial-of-service vulnerability.

An attackers with access to a guest operating system can exploit this issue to crash the guest operating system, effectively denying service to legitimate users.

QEMU KVM QXL Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

QEMU KVM QXL Denial of Service Vulnerability

References:

• QEMU Homepage (QEMU)
  
• QEMU KVM Home Page (QEMU)
  
• Bug 906032 - qxl: synchronous io guest DoS (Red Hat)
  
• xorg-x11-drv-qxl security update (RHSA-2013-0218) (Avaya)