REDHAT-BUG-1427833: Low severity libcacard vulnerability

Published Mar 1, 2017

Updated

The CAC(Common Access Card) library, used by Quick Emulator(Qemu) to implement smartcard support, is vulnerable to a host memory leakage issue. It could occur while allocating a new APDU object using guest supplied raw byte stream in 'vcardapdunew'.

A guest user/process could use this flaw to leak host memory resulting in DoS.

Upstream patch: --------------- -> https://cgit.freedesktop.org/spice/libcacard/commit/?id=9113dc6a303604a2d9812ac70c17d076ef11886c

Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/03/01/11

Affected Software

2 affected components

SPICE libcacard

Qemu Qemu

Event History

Mar 1, 2017

Data Sourced

via Red Hat·11:05 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1427833?

REDHAT-BUG-1427833 has been classified as a medium severity vulnerability due to the potential for memory leakage.

How do I fix REDHAT-BUG-1427833?

To mitigate REDHAT-BUG-1427833, update to the latest version of the SPICE libcacard or QEMU that addresses this vulnerability.

What are the potential impacts of REDHAT-BUG-1427833?

The potential impact of REDHAT-BUG-1427833 includes unauthorized memory disclosure that could expose sensitive information.

Who is affected by REDHAT-BUG-1427833?

Users of the SPICE libcacard and QEMU are affected by REDHAT-BUG-1427833, particularly those using the smartcard support feature.

Is there an exploit for REDHAT-BUG-1427833?

While it is possible for a guest user to exploit REDHAT-BUG-1427833 through crafted input, specific public exploits have not been widely reported.