RHSA-2015:1044: Important: virtio-win security and bug fix update

First published: Wed Jun 03 2015(Updated: )

The virtio-win package provides paravirtualized network drivers for most<br>Microsoft Windows operating systems. Paravirtualized drivers are<br>virtualization-aware drivers used by fully virtualized guests running on<br>Red Hat Enterprise Linux. Fully virtualized guests using the<br>paravirtualized drivers gain significantly better I/O performance than<br>fully virtualized guests running without the drivers.<br>It was found that the Windows Virtio NIC driver did not sufficiently<br>sanitize the length of the incoming IP packets, as demonstrated by a packet<br>with IP options present but the overall packet length not being adjusted to<br>reflect the length of those options. A remote attacker able to send a<br>specially crafted IP packet to the guest could use this flaw to crash that<br>guest. (CVE-2015-3215)<br>Red Hat would like to thank Google Project Zero for reporting this issue.<br>This update also fixes the following bugs:<br><li> When creating a Windows guest using virtio drivers and direct Logical</li> Unit Number (LUN) access with more than 4 SCSI disks under one<br>virtio-scsi-pci controller, the guest terminated unexpectedly with a stop<br>error, also known as the blue screen of death. This update increases the<br>maximum amount of LUNs per a single virtio-scsi-pci controller has been<br>increased to 254, which prevents the described crash from occurring.<br>(BZ#1207546)<br><li> The license.txt file in the virtio-win build has been updated to include</li> the correct year number in the copyright information section. (BZ#1183427)<br>All virtio-win users are advised to upgrade to this updated package, which<br>contains backported patches to correct these issues.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/redhat-errata
• anchor-id/RHSA-2015:1044
• agent/severity
• agent/title
• agent/references
• agent/type
• agent/tags
• agent/event
• agent/description
• agent/remedy
• agent/last-modified-date
• agent/softwarecombine
• agent/first-publish-date
• package-manager/redhat