Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2013-4236 (GCVE-0-2013-4236)
Vulnerability from cvelistv5 – Published: 2013-08-19 23:00 – Updated: 2024-08-06 16:38
VLAI?
EPSS
Summary
VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T16:38:01.690Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6"
},
{
"name": "RHSA-2013:1155",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2013-1155.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2013-08-19T23:00:00.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6"
},
{
"name": "RHSA-2013:1155",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2013-1155.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2013-4236",
"datePublished": "2013-08-19T23:00:00.000Z",
"dateReserved": "2013-06-12T00:00:00.000Z",
"dateUpdated": "2024-08-06T16:38:01.690Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:enterprise_virtualization:3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"105130E9-D48E-4FB8-A715-E6438EC7E744\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:enterprise_virtualization:3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4CB24864-E9F3-4EE2-BFA4-9C6C1EB9EF8B\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \\\"unavailable to the managment server\\\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.\"}, {\"lang\": \"es\", \"value\": \"VDSM en Red Hat Enterprise Virtualization 3 y 3.2, permite a a usuarios con provilegios en la m\\u00e1quina \\\"invitada\\\" provocar que el host no \\\"est\\u00e9 disponible para el servidor de gesti\\u00f3n\\\" a trav\\u00e9s de car\\u00e1cteres XML no v\\u00e1lidos en una respuesta. NOTA: esta cuesti\\u00f3n es debido a una soluci\\u00f3n incompleta del CVE-2013-0167.\"}]",
"id": "CVE-2013-4236",
"lastModified": "2024-11-21T01:55:11.260",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:A/AC:L/Au:S/C:N/I:N/A:P\", \"baseScore\": 2.7, \"accessVector\": \"ADJACENT_NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"LOW\", \"exploitabilityScore\": 5.1, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2013-08-19T23:55:08.930",
"references": "[{\"url\": \"http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2013-1155.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=996166\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2013-1155.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=996166\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2013-4236\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2013-08-19T23:55:08.930\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \\\"unavailable to the managment server\\\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.\"},{\"lang\":\"es\",\"value\":\"VDSM en Red Hat Enterprise Virtualization 3 y 3.2, permite a a usuarios con provilegios en la m\u00e1quina \\\"invitada\\\" provocar que el host no \\\"est\u00e9 disponible para el servidor de gesti\u00f3n\\\" a trav\u00e9s de car\u00e1cteres XML no v\u00e1lidos en una respuesta. NOTA: esta cuesti\u00f3n es debido a una soluci\u00f3n incompleta del CVE-2013-0167.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:A/AC:L/Au:S/C:N/I:N/A:P\",\"baseScore\":2.7,\"accessVector\":\"ADJACENT_NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":5.1,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:enterprise_virtualization:3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"105130E9-D48E-4FB8-A715-E6438EC7E744\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:enterprise_virtualization:3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4CB24864-E9F3-4EE2-BFA4-9C6C1EB9EF8B\"}]}]}],\"references\":[{\"url\":\"http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-1155.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=996166\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-1155.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=996166\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
RHSA-2013_1155
Vulnerability from csaf_redhat - Published: 2013-08-13 16:10 - Updated: 2024-11-14 13:09Summary
Red Hat Security Advisory: rhev 3.2.2 - vdsm security and bug fix update
Severity
Moderate
Notes
Topic: Updated vdsm packages that fix one security issue and various bugs are now
available.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
[Updated 21 August 2013]
The packages list in this erratum has been updated to include missing
packages for the "Red Hat Enterprise Virt Management Agent (v 6 x86_64)"
channel (also known as "rhel-x86_64-rhev-mgmt-agent-6"). No changes have
been made to the original packages.
Details: VDSM is a management module that serves as a Red Hat Enterprise
Virtualization Manager agent on Red Hat Enterprise Virtualization
Hypervisor or Red Hat Enterprise Linux hosts.
It was found that the fix for CVE-2013-0167 released via RHSA-2013:0886
was incomplete. A privileged guest user could potentially use this flaw to
make the host the guest is running on unavailable to the management
server. (CVE-2013-4236)
This issue was found by David Gibson of Red Hat.
This update also fixes the following bugs:
* Previously, failure to move a disk produced a 'truesize' exit message,
which was not informative. Now, failure to move a disk produces a more
helpful error message explaining that the volume is corrupted or missing.
(BZ#985556)
* The LVM filter has been updated to only access physical volumes by full
/dev/mapper paths in order to improve performance. This replaces the
previous behavior of scanning all devices including logical volumes on
physical volumes. (BZ#983599)
* The log collector now collects /var/log/sanlock.log from Hypervisors, to
assist in debugging sanlock errors. (BZ#987042)
* When the poollist parameter was not defined, dumpStorageTable crashed,
causing SOS report generation to fail with the error 'IndexError: list
index out of range'. VDSM now handles this exception, so the log collector
can generate host SOS reports. (BZ#985069)
* Previously, VDSM used the memAvailable parameter to report available
memory on a host, which could return negative values if memory
overcommitment was in use. Now, the new memFree parameter returns the
actual amount of free memory on a host. (BZ#982639)
All users managing Red Hat Enterprise Linux Virtualization hosts using Red
Hat Enterprise Virtualization Manager are advised to install these updated
packages, which fix these issues.
These updated packages will be provided to users of Red Hat Enterprise
Virtualization Hypervisor in the next rhev-hypervisor6 errata package.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.
2.7 ()
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2013:1155
References
Acknowledgments
Red Hat
David Gibson
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated vdsm packages that fix one security issue and various bugs are now\navailable.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.\n\n[Updated 21 August 2013]\nThe packages list in this erratum has been updated to include missing\npackages for the \"Red Hat Enterprise Virt Management Agent (v 6 x86_64)\"\nchannel (also known as \"rhel-x86_64-rhev-mgmt-agent-6\"). No changes have\nbeen made to the original packages.",
"title": "Topic"
},
{
"category": "general",
"text": "VDSM is a management module that serves as a Red Hat Enterprise\nVirtualization Manager agent on Red Hat Enterprise Virtualization\nHypervisor or Red Hat Enterprise Linux hosts. \n\nIt was found that the fix for CVE-2013-0167 released via RHSA-2013:0886\nwas incomplete. A privileged guest user could potentially use this flaw to\nmake the host the guest is running on unavailable to the management\nserver. (CVE-2013-4236)\n\nThis issue was found by David Gibson of Red Hat.\n\nThis update also fixes the following bugs:\n\n* Previously, failure to move a disk produced a \u0027truesize\u0027 exit message,\nwhich was not informative. Now, failure to move a disk produces a more\nhelpful error message explaining that the volume is corrupted or missing.\n(BZ#985556)\n\n* The LVM filter has been updated to only access physical volumes by full\n/dev/mapper paths in order to improve performance. This replaces the\nprevious behavior of scanning all devices including logical volumes on\nphysical volumes. (BZ#983599)\n\n* The log collector now collects /var/log/sanlock.log from Hypervisors, to\nassist in debugging sanlock errors. (BZ#987042)\n\n* When the poollist parameter was not defined, dumpStorageTable crashed,\ncausing SOS report generation to fail with the error \u0027IndexError: list\nindex out of range\u0027. VDSM now handles this exception, so the log collector\ncan generate host SOS reports. (BZ#985069)\n\n* Previously, VDSM used the memAvailable parameter to report available\nmemory on a host, which could return negative values if memory\novercommitment was in use. Now, the new memFree parameter returns the\nactual amount of free memory on a host. (BZ#982639)\n\nAll users managing Red Hat Enterprise Linux Virtualization hosts using Red\nHat Enterprise Virtualization Manager are advised to install these updated\npackages, which fix these issues.\n\nThese updated packages will be provided to users of Red Hat Enterprise\nVirtualization Hypervisor in the next rhev-hypervisor6 errata package.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2013:1155",
"url": "https://access.redhat.com/errata/RHSA-2013:1155"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://rhn.redhat.com/errata/RHSA-2013-0886.html",
"url": "https://rhn.redhat.com/errata/RHSA-2013-0886.html"
},
{
"category": "external",
"summary": "982639",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=982639"
},
{
"category": "external",
"summary": "983599",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=983599"
},
{
"category": "external",
"summary": "985556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=985556"
},
{
"category": "external",
"summary": "987042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=987042"
},
{
"category": "external",
"summary": "996166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1155.json"
}
],
"title": "Red Hat Security Advisory: rhev 3.2.2 - vdsm security and bug fix update",
"tracking": {
"current_release_date": "2024-11-14T13:09:43+00:00",
"generator": {
"date": "2024-11-14T13:09:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.0"
}
},
"id": "RHSA-2013:1155",
"initial_release_date": "2013-08-13T16:10:00+00:00",
"revision_history": [
{
"date": "2013-08-13T16:10:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2013-08-21T17:07:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-14T13:09:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEV-M 3.2",
"product": {
"name": "RHEV-M 3.2",
"product_id": "6Server-RHEV-S-3.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhev_manager:3"
}
}
},
{
"category": "product_name",
"name": "RHEV Agents (vdsm)",
"product": {
"name": "RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:6::hypervisor"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "vdsm-0:4.10.2-24.0.el6ev.src",
"product": {
"name": "vdsm-0:4.10.2-24.0.el6ev.src",
"product_id": "vdsm-0:4.10.2-24.0.el6ev.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm@4.10.2-24.0.el6ev?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"product": {
"name": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"product_id": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-debuginfo@4.10.2-24.0.el6ev?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "vdsm-0:4.10.2-24.0.el6ev.x86_64",
"product": {
"name": "vdsm-0:4.10.2-24.0.el6ev.x86_64",
"product_id": "vdsm-0:4.10.2-24.0.el6ev.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm@4.10.2-24.0.el6ev?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"product": {
"name": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"product_id": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-python@4.10.2-24.0.el6ev?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"product": {
"name": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"product_id": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-bootstrap@4.10.2-24.0.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"product": {
"name": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"product_id": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-xmlrpc@4.10.2-24.0.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"product": {
"name": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"product_id": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-reg@4.10.2-24.0.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"product": {
"name": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"product_id": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-cli@4.10.2-24.0.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"product": {
"name": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"product_id": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-hook-vhostmd@4.10.2-24.0.el6ev?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-0:4.10.2-24.0.el6ev.src as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.src"
},
"product_reference": "vdsm-0:4.10.2-24.0.el6ev.src",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-0:4.10.2-24.0.el6ev.x86_64 as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.x86_64"
},
"product_reference": "vdsm-0:4.10.2-24.0.el6ev.x86_64",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-cli-0:4.10.2-24.0.el6ev.noarch"
},
"product_reference": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64 as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
},
"product_reference": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch"
},
"product_reference": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64 as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-python-0:4.10.2-24.0.el6ev.x86_64"
},
"product_reference": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-reg-0:4.10.2-24.0.el6ev.noarch"
},
"product_reference": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch"
},
"product_reference": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-0:4.10.2-24.0.el6ev.src as a component of RHEV-M 3.2",
"product_id": "6Server-RHEV-S-3.2:vdsm-0:4.10.2-24.0.el6ev.src"
},
"product_reference": "vdsm-0:4.10.2-24.0.el6ev.src",
"relates_to_product_reference": "6Server-RHEV-S-3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch as a component of RHEV-M 3.2",
"product_id": "6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch"
},
"product_reference": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64 as a component of RHEV-M 3.2",
"product_id": "6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
},
"product_reference": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"relates_to_product_reference": "6Server-RHEV-S-3.2"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"David Gibson"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2013-4236",
"discovery_date": "2013-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "996166"
}
],
"notes": [
{
"category": "description",
"text": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vdsm: incomplete fix for CVE-2013-0167 issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.src",
"6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-S-3.2:vdsm-0:4.10.2-24.0.el6ev.src",
"6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4236"
},
{
"category": "external",
"summary": "RHBZ#996166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4236",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4236"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4236",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4236"
}
],
"release_date": "2013-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-08-13T16:10:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
"product_ids": [
"6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.src",
"6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-S-3.2:vdsm-0:4.10.2-24.0.el6ev.src",
"6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:1155"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:L/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.src",
"6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-S-3.2:vdsm-0:4.10.2-24.0.el6ev.src",
"6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vdsm: incomplete fix for CVE-2013-0167 issue"
}
]
}
RHSA-2013:1181
Vulnerability from csaf_redhat - Published: 2013-08-27 18:50 - Updated: 2025-11-21 17:45Summary
Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
Severity
Moderate
Notes
Topic: An updated rhev-hypervisor6 package that fixes three security issues and
various bugs is now available.
The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details: The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization
Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor
is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes
everything necessary to run and manage virtual machines: A subset of the
Red Hat Enterprise Linux operating environment and the Red Hat Enterprise
Virtualization Agent.
Note: Red Hat Enterprise Virtualization Hypervisor is only available for
the Intel 64 and AMD64 architectures with virtualization extensions.
Upgrade Note: If you upgrade the Red Hat Enterprise Virtualization
Hypervisor through the 3.2 Manager administration portal, the Host may
appear with the status of "Install Failed". If this happens, place the host
into maintenance mode, then activate it again to get the host back to an
"Up" state.
It was discovered that NSS leaked timing information when decrypting
TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites
were used. A remote attacker could possibly use this flaw to retrieve plain
text from the encrypted packets by using a TLS/SSL or DTLS server as a
padding oracle. (CVE-2013-1620)
It was found that the fix for CVE-2013-0167 released via RHSA-2013:0907
was incomplete. A privileged guest user could potentially use this flaw to
make the host the guest is running on unavailable to the management
server. (CVE-2013-4236)
An out-of-bounds memory read flaw was found in the way NSS decoded certain
certificates. If an application using NSS decoded a malformed certificate,
it could cause the application to crash. (CVE-2013-0791)
Red Hat would like to thank the Mozilla project for reporting
CVE-2013-0791. Upstream acknowledges Ambroz Bizjak as the original reporter
of CVE-2013-0791. The CVE-2013-4236 issue was found by David Gibson of Red
Hat.
This updated package provides updated components that include fixes for
various security issues. These issues have no security impact on Red Hat
Enterprise Virtualization Hypervisor itself, however. The security fixes
included in this update address the following CVE numbers:
CVE-2013-4854 (bind issue)
CVE-2012-6544, CVE-2013-2146, CVE-2013-2206, CVE-2013-2224, CVE-2013-2232,
and CVE-2013-2237 (kernel issues)
This update also contains the fixes from the following errata:
* vdsm: RHSA-2013:1155 and RHBA-2013:1158
Users of the Red Hat Enterprise Virtualization Hypervisor are advised to
upgrade to this updated package, which corrects these issues.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.
4.3 ()
Vendor Fix
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258
To upgrade Hypervisors in Red Hat Enterprise Virtualization
environments using the disk image provided by this package, refer to:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html
https://access.redhat.com/errata/RHSA-2013:1181
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
5.1 ()
Vendor Fix
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258
To upgrade Hypervisors in Red Hat Enterprise Virtualization
environments using the disk image provided by this package, refer to:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html
https://access.redhat.com/errata/RHSA-2013:1181
VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.
2.7 ()
Vendor Fix
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258
To upgrade Hypervisors in Red Hat Enterprise Virtualization
environments using the disk image provided by this package, refer to:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html
https://access.redhat.com/errata/RHSA-2013:1181
References
| URL | Category | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Acknowledgments
Mozilla project
Ambroz Bizjak
Red Hat
David Gibson
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated rhev-hypervisor6 package that fixes three security issues and\nvarious bugs is now available.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization\nHypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor\nis a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes\neverything necessary to run and manage virtual machines: A subset of the\nRed Hat Enterprise Linux operating environment and the Red Hat Enterprise\nVirtualization Agent.\n\nNote: Red Hat Enterprise Virtualization Hypervisor is only available for\nthe Intel 64 and AMD64 architectures with virtualization extensions.\n\nUpgrade Note: If you upgrade the Red Hat Enterprise Virtualization\nHypervisor through the 3.2 Manager administration portal, the Host may\nappear with the status of \"Install Failed\". If this happens, place the host\ninto maintenance mode, then activate it again to get the host back to an\n\"Up\" state.\n\nIt was discovered that NSS leaked timing information when decrypting\nTLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites\nwere used. A remote attacker could possibly use this flaw to retrieve plain\ntext from the encrypted packets by using a TLS/SSL or DTLS server as a\npadding oracle. (CVE-2013-1620)\n\nIt was found that the fix for CVE-2013-0167 released via RHSA-2013:0907\nwas incomplete. A privileged guest user could potentially use this flaw to\nmake the host the guest is running on unavailable to the management\nserver. (CVE-2013-4236)\n\nAn out-of-bounds memory read flaw was found in the way NSS decoded certain\ncertificates. If an application using NSS decoded a malformed certificate,\nit could cause the application to crash. (CVE-2013-0791)\n\nRed Hat would like to thank the Mozilla project for reporting\nCVE-2013-0791. Upstream acknowledges Ambroz Bizjak as the original reporter\nof CVE-2013-0791. The CVE-2013-4236 issue was found by David Gibson of Red\nHat.\n\nThis updated package provides updated components that include fixes for\nvarious security issues. These issues have no security impact on Red Hat\nEnterprise Virtualization Hypervisor itself, however. The security fixes\nincluded in this update address the following CVE numbers:\n\nCVE-2013-4854 (bind issue)\n\nCVE-2012-6544, CVE-2013-2146, CVE-2013-2206, CVE-2013-2224, CVE-2013-2232,\nand CVE-2013-2237 (kernel issues)\n\nThis update also contains the fixes from the following errata:\n\n* vdsm: RHSA-2013:1155 and RHBA-2013:1158\n\nUsers of the Red Hat Enterprise Virtualization Hypervisor are advised to\nupgrade to this updated package, which corrects these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2013:1181",
"url": "https://access.redhat.com/errata/RHSA-2013:1181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://rhn.redhat.com/errata/RHSA-2013-0907.html",
"url": "https://rhn.redhat.com/errata/RHSA-2013-0907.html"
},
{
"category": "external",
"summary": "https://rhn.redhat.com/errata/RHSA-2013-1155.html",
"url": "https://rhn.redhat.com/errata/RHSA-2013-1155.html"
},
{
"category": "external",
"summary": "https://rhn.redhat.com/errata/RHBA-2013-1158.html",
"url": "https://rhn.redhat.com/errata/RHBA-2013-1158.html"
},
{
"category": "external",
"summary": "https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"url": "https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html"
},
{
"category": "external",
"summary": "908234",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=908234"
},
{
"category": "external",
"summary": "946947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=946947"
},
{
"category": "external",
"summary": "996166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
},
{
"category": "external",
"summary": "996584",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996584"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1181.json"
}
],
"title": "Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update",
"tracking": {
"current_release_date": "2025-11-21T17:45:06+00:00",
"generator": {
"date": "2025-11-21T17:45:06+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2013:1181",
"initial_release_date": "2013-08-27T18:50:00+00:00",
"revision_history": [
{
"date": "2013-08-27T18:50:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2013-08-27T18:53:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:45:06+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEV Hypervisor for RHEL-6",
"product": {
"name": "RHEV Hypervisor for RHEL-6",
"product_id": "6Server-RHEV-Hypervisor",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::hypervisor"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch",
"product": {
"name": "rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch",
"product_id": "rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhev-hypervisor6@6.4-20130815.0.el6_4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch as a component of RHEV Hypervisor for RHEL-6",
"product_id": "6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
},
"product_reference": "rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch",
"relates_to_product_reference": "6Server-RHEV-Hypervisor"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"Ambroz Bizjak"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2013-0791",
"discovery_date": "2013-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "946947"
}
],
"notes": [
{
"category": "description",
"text": "The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Out-of-bounds array read in CERT_DecodeCertPackage (MFSA 2013-40)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-0791"
},
{
"category": "external",
"summary": "RHBZ#946947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=946947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-0791",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0791"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0791",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0791"
},
{
"category": "external",
"summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-40.html",
"url": "http://www.mozilla.org/security/announce/2013/mfsa2013-40.html"
}
],
"release_date": "2013-04-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-08-27T18:50:00+00:00",
"details": "This update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization\nenvironments using the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:1181"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Mozilla: Out-of-bounds array read in CERT_DecodeCertPackage (MFSA 2013-40)"
},
{
"cve": "CVE-2013-1620",
"discovery_date": "2013-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "908234"
}
],
"notes": [
{
"category": "description",
"text": "The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: TLS CBC padding timing attack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-1620"
},
{
"category": "external",
"summary": "RHBZ#908234",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=908234"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-1620",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1620"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1620",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1620"
},
{
"category": "external",
"summary": "http://www.isg.rhul.ac.uk/tls/",
"url": "http://www.isg.rhul.ac.uk/tls/"
}
],
"release_date": "2013-02-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-08-27T18:50:00+00:00",
"details": "This update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization\nenvironments using the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:1181"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: TLS CBC padding timing attack"
},
{
"acknowledgments": [
{
"names": [
"David Gibson"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2013-4236",
"discovery_date": "2013-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "996166"
}
],
"notes": [
{
"category": "description",
"text": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vdsm: incomplete fix for CVE-2013-0167 issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4236"
},
{
"category": "external",
"summary": "RHBZ#996166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4236",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4236"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4236",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4236"
}
],
"release_date": "2013-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-08-27T18:50:00+00:00",
"details": "This update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization\nenvironments using the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:1181"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:L/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vdsm: incomplete fix for CVE-2013-0167 issue"
}
]
}
RHSA-2013:1155
Vulnerability from csaf_redhat - Published: 2013-08-13 16:10 - Updated: 2025-11-21 17:45Summary
Red Hat Security Advisory: rhev 3.2.2 - vdsm security and bug fix update
Severity
Moderate
Notes
Topic: Updated vdsm packages that fix one security issue and various bugs are now
available.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
[Updated 21 August 2013]
The packages list in this erratum has been updated to include missing
packages for the "Red Hat Enterprise Virt Management Agent (v 6 x86_64)"
channel (also known as "rhel-x86_64-rhev-mgmt-agent-6"). No changes have
been made to the original packages.
Details: VDSM is a management module that serves as a Red Hat Enterprise
Virtualization Manager agent on Red Hat Enterprise Virtualization
Hypervisor or Red Hat Enterprise Linux hosts.
It was found that the fix for CVE-2013-0167 released via RHSA-2013:0886
was incomplete. A privileged guest user could potentially use this flaw to
make the host the guest is running on unavailable to the management
server. (CVE-2013-4236)
This issue was found by David Gibson of Red Hat.
This update also fixes the following bugs:
* Previously, failure to move a disk produced a 'truesize' exit message,
which was not informative. Now, failure to move a disk produces a more
helpful error message explaining that the volume is corrupted or missing.
(BZ#985556)
* The LVM filter has been updated to only access physical volumes by full
/dev/mapper paths in order to improve performance. This replaces the
previous behavior of scanning all devices including logical volumes on
physical volumes. (BZ#983599)
* The log collector now collects /var/log/sanlock.log from Hypervisors, to
assist in debugging sanlock errors. (BZ#987042)
* When the poollist parameter was not defined, dumpStorageTable crashed,
causing SOS report generation to fail with the error 'IndexError: list
index out of range'. VDSM now handles this exception, so the log collector
can generate host SOS reports. (BZ#985069)
* Previously, VDSM used the memAvailable parameter to report available
memory on a host, which could return negative values if memory
overcommitment was in use. Now, the new memFree parameter returns the
actual amount of free memory on a host. (BZ#982639)
All users managing Red Hat Enterprise Linux Virtualization hosts using Red
Hat Enterprise Virtualization Manager are advised to install these updated
packages, which fix these issues.
These updated packages will be provided to users of Red Hat Enterprise
Virtualization Hypervisor in the next rhev-hypervisor6 errata package.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.
2.7 ()
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258
https://access.redhat.com/errata/RHSA-2013:1155
References
| URL | Category | ||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||
Acknowledgments
Red Hat
David Gibson
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated vdsm packages that fix one security issue and various bugs are now\navailable.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.\n\n[Updated 21 August 2013]\nThe packages list in this erratum has been updated to include missing\npackages for the \"Red Hat Enterprise Virt Management Agent (v 6 x86_64)\"\nchannel (also known as \"rhel-x86_64-rhev-mgmt-agent-6\"). No changes have\nbeen made to the original packages.",
"title": "Topic"
},
{
"category": "general",
"text": "VDSM is a management module that serves as a Red Hat Enterprise\nVirtualization Manager agent on Red Hat Enterprise Virtualization\nHypervisor or Red Hat Enterprise Linux hosts. \n\nIt was found that the fix for CVE-2013-0167 released via RHSA-2013:0886\nwas incomplete. A privileged guest user could potentially use this flaw to\nmake the host the guest is running on unavailable to the management\nserver. (CVE-2013-4236)\n\nThis issue was found by David Gibson of Red Hat.\n\nThis update also fixes the following bugs:\n\n* Previously, failure to move a disk produced a \u0027truesize\u0027 exit message,\nwhich was not informative. Now, failure to move a disk produces a more\nhelpful error message explaining that the volume is corrupted or missing.\n(BZ#985556)\n\n* The LVM filter has been updated to only access physical volumes by full\n/dev/mapper paths in order to improve performance. This replaces the\nprevious behavior of scanning all devices including logical volumes on\nphysical volumes. (BZ#983599)\n\n* The log collector now collects /var/log/sanlock.log from Hypervisors, to\nassist in debugging sanlock errors. (BZ#987042)\n\n* When the poollist parameter was not defined, dumpStorageTable crashed,\ncausing SOS report generation to fail with the error \u0027IndexError: list\nindex out of range\u0027. VDSM now handles this exception, so the log collector\ncan generate host SOS reports. (BZ#985069)\n\n* Previously, VDSM used the memAvailable parameter to report available\nmemory on a host, which could return negative values if memory\novercommitment was in use. Now, the new memFree parameter returns the\nactual amount of free memory on a host. (BZ#982639)\n\nAll users managing Red Hat Enterprise Linux Virtualization hosts using Red\nHat Enterprise Virtualization Manager are advised to install these updated\npackages, which fix these issues.\n\nThese updated packages will be provided to users of Red Hat Enterprise\nVirtualization Hypervisor in the next rhev-hypervisor6 errata package.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2013:1155",
"url": "https://access.redhat.com/errata/RHSA-2013:1155"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://rhn.redhat.com/errata/RHSA-2013-0886.html",
"url": "https://rhn.redhat.com/errata/RHSA-2013-0886.html"
},
{
"category": "external",
"summary": "982639",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=982639"
},
{
"category": "external",
"summary": "983599",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=983599"
},
{
"category": "external",
"summary": "985556",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=985556"
},
{
"category": "external",
"summary": "987042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=987042"
},
{
"category": "external",
"summary": "996166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1155.json"
}
],
"title": "Red Hat Security Advisory: rhev 3.2.2 - vdsm security and bug fix update",
"tracking": {
"current_release_date": "2025-11-21T17:45:02+00:00",
"generator": {
"date": "2025-11-21T17:45:02+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2013:1155",
"initial_release_date": "2013-08-13T16:10:00+00:00",
"revision_history": [
{
"date": "2013-08-13T16:10:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2013-08-21T17:07:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:45:02+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEV-M 3.2",
"product": {
"name": "RHEV-M 3.2",
"product_id": "6Server-RHEV-S-3.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhev_manager:3"
}
}
},
{
"category": "product_name",
"name": "RHEV Agents (vdsm)",
"product": {
"name": "RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:6::hypervisor"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "vdsm-0:4.10.2-24.0.el6ev.src",
"product": {
"name": "vdsm-0:4.10.2-24.0.el6ev.src",
"product_id": "vdsm-0:4.10.2-24.0.el6ev.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm@4.10.2-24.0.el6ev?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"product": {
"name": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"product_id": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-debuginfo@4.10.2-24.0.el6ev?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "vdsm-0:4.10.2-24.0.el6ev.x86_64",
"product": {
"name": "vdsm-0:4.10.2-24.0.el6ev.x86_64",
"product_id": "vdsm-0:4.10.2-24.0.el6ev.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm@4.10.2-24.0.el6ev?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"product": {
"name": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"product_id": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-python@4.10.2-24.0.el6ev?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"product": {
"name": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"product_id": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-bootstrap@4.10.2-24.0.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"product": {
"name": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"product_id": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-xmlrpc@4.10.2-24.0.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"product": {
"name": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"product_id": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-reg@4.10.2-24.0.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"product": {
"name": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"product_id": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-cli@4.10.2-24.0.el6ev?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"product": {
"name": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"product_id": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/vdsm-hook-vhostmd@4.10.2-24.0.el6ev?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-0:4.10.2-24.0.el6ev.src as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.src"
},
"product_reference": "vdsm-0:4.10.2-24.0.el6ev.src",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-0:4.10.2-24.0.el6ev.x86_64 as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.x86_64"
},
"product_reference": "vdsm-0:4.10.2-24.0.el6ev.x86_64",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-cli-0:4.10.2-24.0.el6ev.noarch"
},
"product_reference": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64 as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
},
"product_reference": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch"
},
"product_reference": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64 as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-python-0:4.10.2-24.0.el6ev.x86_64"
},
"product_reference": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-reg-0:4.10.2-24.0.el6ev.noarch"
},
"product_reference": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch"
},
"product_reference": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-0:4.10.2-24.0.el6ev.src as a component of RHEV-M 3.2",
"product_id": "6Server-RHEV-S-3.2:vdsm-0:4.10.2-24.0.el6ev.src"
},
"product_reference": "vdsm-0:4.10.2-24.0.el6ev.src",
"relates_to_product_reference": "6Server-RHEV-S-3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch as a component of RHEV-M 3.2",
"product_id": "6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch"
},
"product_reference": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"relates_to_product_reference": "6Server-RHEV-S-3.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64 as a component of RHEV-M 3.2",
"product_id": "6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
},
"product_reference": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"relates_to_product_reference": "6Server-RHEV-S-3.2"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"David Gibson"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2013-4236",
"discovery_date": "2013-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "996166"
}
],
"notes": [
{
"category": "description",
"text": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vdsm: incomplete fix for CVE-2013-0167 issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.src",
"6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-S-3.2:vdsm-0:4.10.2-24.0.el6ev.src",
"6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4236"
},
{
"category": "external",
"summary": "RHBZ#996166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4236",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4236"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4236",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4236"
}
],
"release_date": "2013-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-08-13T16:10:00+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
"product_ids": [
"6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.src",
"6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-S-3.2:vdsm-0:4.10.2-24.0.el6ev.src",
"6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:1155"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:L/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.src",
"6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
"6Server-RHEV-Agents:vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-S-3.2:vdsm-0:4.10.2-24.0.el6ev.src",
"6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
"6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vdsm: incomplete fix for CVE-2013-0167 issue"
}
]
}
RHSA-2013_1181
Vulnerability from csaf_redhat - Published: 2013-08-27 18:50 - Updated: 2024-11-22 06:25Summary
Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
Severity
Moderate
Notes
Topic: An updated rhev-hypervisor6 package that fixes three security issues and
various bugs is now available.
The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details: The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization
Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor
is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes
everything necessary to run and manage virtual machines: A subset of the
Red Hat Enterprise Linux operating environment and the Red Hat Enterprise
Virtualization Agent.
Note: Red Hat Enterprise Virtualization Hypervisor is only available for
the Intel 64 and AMD64 architectures with virtualization extensions.
Upgrade Note: If you upgrade the Red Hat Enterprise Virtualization
Hypervisor through the 3.2 Manager administration portal, the Host may
appear with the status of "Install Failed". If this happens, place the host
into maintenance mode, then activate it again to get the host back to an
"Up" state.
It was discovered that NSS leaked timing information when decrypting
TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites
were used. A remote attacker could possibly use this flaw to retrieve plain
text from the encrypted packets by using a TLS/SSL or DTLS server as a
padding oracle. (CVE-2013-1620)
It was found that the fix for CVE-2013-0167 released via RHSA-2013:0907
was incomplete. A privileged guest user could potentially use this flaw to
make the host the guest is running on unavailable to the management
server. (CVE-2013-4236)
An out-of-bounds memory read flaw was found in the way NSS decoded certain
certificates. If an application using NSS decoded a malformed certificate,
it could cause the application to crash. (CVE-2013-0791)
Red Hat would like to thank the Mozilla project for reporting
CVE-2013-0791. Upstream acknowledges Ambroz Bizjak as the original reporter
of CVE-2013-0791. The CVE-2013-4236 issue was found by David Gibson of Red
Hat.
This updated package provides updated components that include fixes for
various security issues. These issues have no security impact on Red Hat
Enterprise Virtualization Hypervisor itself, however. The security fixes
included in this update address the following CVE numbers:
CVE-2013-4854 (bind issue)
CVE-2012-6544, CVE-2013-2146, CVE-2013-2206, CVE-2013-2224, CVE-2013-2232,
and CVE-2013-2237 (kernel issues)
This update also contains the fixes from the following errata:
* vdsm: RHSA-2013:1155 and RHBA-2013:1158
Users of the Red Hat Enterprise Virtualization Hypervisor are advised to
upgrade to this updated package, which corrects these issues.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.
4.3 ()
Vendor Fix
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258
To upgrade Hypervisors in Red Hat Enterprise Virtualization
environments using the disk image provided by this package, refer to:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html
https://access.redhat.com/errata/RHSA-2013:1181
The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
5.1 ()
Vendor Fix
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258
To upgrade Hypervisors in Red Hat Enterprise Virtualization
environments using the disk image provided by this package, refer to:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html
https://access.redhat.com/errata/RHSA-2013:1181
VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.
2.7 ()
Vendor Fix
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258
To upgrade Hypervisors in Red Hat Enterprise Virtualization
environments using the disk image provided by this package, refer to:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html
https://access.redhat.com/errata/RHSA-2013:1181
References
| URL | Category | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Acknowledgments
Mozilla project
Ambroz Bizjak
Red Hat
David Gibson
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated rhev-hypervisor6 package that fixes three security issues and\nvarious bugs is now available.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization\nHypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor\nis a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes\neverything necessary to run and manage virtual machines: A subset of the\nRed Hat Enterprise Linux operating environment and the Red Hat Enterprise\nVirtualization Agent.\n\nNote: Red Hat Enterprise Virtualization Hypervisor is only available for\nthe Intel 64 and AMD64 architectures with virtualization extensions.\n\nUpgrade Note: If you upgrade the Red Hat Enterprise Virtualization\nHypervisor through the 3.2 Manager administration portal, the Host may\nappear with the status of \"Install Failed\". If this happens, place the host\ninto maintenance mode, then activate it again to get the host back to an\n\"Up\" state.\n\nIt was discovered that NSS leaked timing information when decrypting\nTLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites\nwere used. A remote attacker could possibly use this flaw to retrieve plain\ntext from the encrypted packets by using a TLS/SSL or DTLS server as a\npadding oracle. (CVE-2013-1620)\n\nIt was found that the fix for CVE-2013-0167 released via RHSA-2013:0907\nwas incomplete. A privileged guest user could potentially use this flaw to\nmake the host the guest is running on unavailable to the management\nserver. (CVE-2013-4236)\n\nAn out-of-bounds memory read flaw was found in the way NSS decoded certain\ncertificates. If an application using NSS decoded a malformed certificate,\nit could cause the application to crash. (CVE-2013-0791)\n\nRed Hat would like to thank the Mozilla project for reporting\nCVE-2013-0791. Upstream acknowledges Ambroz Bizjak as the original reporter\nof CVE-2013-0791. The CVE-2013-4236 issue was found by David Gibson of Red\nHat.\n\nThis updated package provides updated components that include fixes for\nvarious security issues. These issues have no security impact on Red Hat\nEnterprise Virtualization Hypervisor itself, however. The security fixes\nincluded in this update address the following CVE numbers:\n\nCVE-2013-4854 (bind issue)\n\nCVE-2012-6544, CVE-2013-2146, CVE-2013-2206, CVE-2013-2224, CVE-2013-2232,\nand CVE-2013-2237 (kernel issues)\n\nThis update also contains the fixes from the following errata:\n\n* vdsm: RHSA-2013:1155 and RHBA-2013:1158\n\nUsers of the Red Hat Enterprise Virtualization Hypervisor are advised to\nupgrade to this updated package, which corrects these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2013:1181",
"url": "https://access.redhat.com/errata/RHSA-2013:1181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://rhn.redhat.com/errata/RHSA-2013-0907.html",
"url": "https://rhn.redhat.com/errata/RHSA-2013-0907.html"
},
{
"category": "external",
"summary": "https://rhn.redhat.com/errata/RHSA-2013-1155.html",
"url": "https://rhn.redhat.com/errata/RHSA-2013-1155.html"
},
{
"category": "external",
"summary": "https://rhn.redhat.com/errata/RHBA-2013-1158.html",
"url": "https://rhn.redhat.com/errata/RHBA-2013-1158.html"
},
{
"category": "external",
"summary": "https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"url": "https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html"
},
{
"category": "external",
"summary": "908234",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=908234"
},
{
"category": "external",
"summary": "946947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=946947"
},
{
"category": "external",
"summary": "996166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
},
{
"category": "external",
"summary": "996584",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996584"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1181.json"
}
],
"title": "Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T06:25:47+00:00",
"generator": {
"date": "2024-11-22T06:25:47+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2013:1181",
"initial_release_date": "2013-08-27T18:50:00+00:00",
"revision_history": [
{
"date": "2013-08-27T18:50:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2013-08-27T18:53:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T06:25:47+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEV Hypervisor for RHEL-6",
"product": {
"name": "RHEV Hypervisor for RHEL-6",
"product_id": "6Server-RHEV-Hypervisor",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::hypervisor"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch",
"product": {
"name": "rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch",
"product_id": "rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhev-hypervisor6@6.4-20130815.0.el6_4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch as a component of RHEV Hypervisor for RHEL-6",
"product_id": "6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
},
"product_reference": "rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch",
"relates_to_product_reference": "6Server-RHEV-Hypervisor"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"Ambroz Bizjak"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2013-0791",
"discovery_date": "2013-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "946947"
}
],
"notes": [
{
"category": "description",
"text": "The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Out-of-bounds array read in CERT_DecodeCertPackage (MFSA 2013-40)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-0791"
},
{
"category": "external",
"summary": "RHBZ#946947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=946947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-0791",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0791"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0791",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0791"
},
{
"category": "external",
"summary": "http://www.mozilla.org/security/announce/2013/mfsa2013-40.html",
"url": "http://www.mozilla.org/security/announce/2013/mfsa2013-40.html"
}
],
"release_date": "2013-04-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-08-27T18:50:00+00:00",
"details": "This update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization\nenvironments using the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:1181"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Mozilla: Out-of-bounds array read in CERT_DecodeCertPackage (MFSA 2013-40)"
},
{
"cve": "CVE-2013-1620",
"discovery_date": "2013-02-04T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "908234"
}
],
"notes": [
{
"category": "description",
"text": "The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nss: TLS CBC padding timing attack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-1620"
},
{
"category": "external",
"summary": "RHBZ#908234",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=908234"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-1620",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-1620"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1620",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1620"
},
{
"category": "external",
"summary": "http://www.isg.rhul.ac.uk/tls/",
"url": "http://www.isg.rhul.ac.uk/tls/"
}
],
"release_date": "2013-02-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-08-27T18:50:00+00:00",
"details": "This update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization\nenvironments using the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:1181"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "nss: TLS CBC padding timing attack"
},
{
"acknowledgments": [
{
"names": [
"David Gibson"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2013-4236",
"discovery_date": "2013-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "996166"
}
],
"notes": [
{
"category": "description",
"text": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vdsm: incomplete fix for CVE-2013-0167 issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-4236"
},
{
"category": "external",
"summary": "RHBZ#996166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-4236",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-4236"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4236",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4236"
}
],
"release_date": "2013-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-08-27T18:50:00+00:00",
"details": "This update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization\nenvironments using the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:1181"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:L/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.4-20130815.0.el6_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vdsm: incomplete fix for CVE-2013-0167 issue"
}
]
}
GSD-2013-4236
Vulnerability from gsd - Updated: 2023-12-13 01:22Details
VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2013-4236",
"description": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.",
"id": "GSD-2013-4236",
"references": [
"https://access.redhat.com/errata/RHSA-2013:1181",
"https://access.redhat.com/errata/RHSA-2013:1155"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2013-4236"
],
"details": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.",
"id": "GSD-2013-4236",
"modified": "2023-12-13T01:22:16.304758Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2013-4236",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6",
"refsource": "MISC",
"url": "http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2013-1155.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2013-1155.html"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=996166",
"refsource": "MISC",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:redhat:enterprise_virtualization:3.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:enterprise_virtualization:3.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2013-4236"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=996166",
"refsource": "CONFIRM",
"tags": [],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
},
{
"name": "RHSA-2013:1155",
"refsource": "REDHAT",
"tags": [
"Vendor Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2013-1155.html"
},
{
"name": "http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6",
"refsource": "MISC",
"tags": [],
"url": "http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:L/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 5.1,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2023-02-13T00:28Z",
"publishedDate": "2013-08-19T23:55Z"
}
}
}
FKIE_CVE-2013-4236
Vulnerability from fkie_nvd - Published: 2013-08-19 23:55 - Updated: 2025-04-11 00:51
Severity ?
Summary
VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.
References
| URL | Tags | ||
|---|---|---|---|
| secalert@redhat.com | http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6 | ||
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2013-1155.html | Vendor Advisory | |
| secalert@redhat.com | https://bugzilla.redhat.com/show_bug.cgi?id=996166 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2013-1155.html | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=996166 |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| redhat | enterprise_virtualization | 3.0 | |
| redhat | enterprise_virtualization | 3.2 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:enterprise_virtualization:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "105130E9-D48E-4FB8-A715-E6438EC7E744",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:enterprise_virtualization:3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "4CB24864-E9F3-4EE2-BFA4-9C6C1EB9EF8B",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167."
},
{
"lang": "es",
"value": "VDSM en Red Hat Enterprise Virtualization 3 y 3.2, permite a a usuarios con provilegios en la m\u00e1quina \"invitada\" provocar que el host no \"est\u00e9 disponible para el servidor de gesti\u00f3n\" a trav\u00e9s de car\u00e1cteres XML no v\u00e1lidos en una respuesta. NOTA: esta cuesti\u00f3n es debido a una soluci\u00f3n incompleta del CVE-2013-0167."
}
],
"id": "CVE-2013-4236",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:L/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 5.1,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2013-08-19T23:55:08.930",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2013-1155.html"
},
{
"source": "secalert@redhat.com",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2013-1155.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-JHJ6-XFQH-J93V
Vulnerability from github – Published: 2022-05-17 05:06 – Updated: 2022-05-17 05:06
VLAI?
Details
VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.
{
"affected": [],
"aliases": [
"CVE-2013-4236"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2013-08-19T23:55:00Z",
"severity": "LOW"
},
"details": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.",
"id": "GHSA-jhj6-xfqh-j93v",
"modified": "2022-05-17T05:06:11Z",
"published": "2022-05-17T05:06:11Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4236"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
},
{
"type": "WEB",
"url": "http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6"
},
{
"type": "WEB",
"url": "http://gerrit.ovirt.org/gitweb?p=vdsm.git;a=commit;h=5fe1615b7949999fc9abd896bde63bf24f8431d6"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2013-1155.html"
}
],
"schema_version": "1.4.0",
"severity": []
}
Loading…
Show additional events:
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…