Red Hat Security Advisory

RHSA-2010:0476

rhev-hypervisor security, bug fix, and enhancement update

Released 2010-06-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Virtualization Hypervisor 5 rhev-hypervisor-5.5-2.2.4.2.el5rhev, rhev-hypervisor-pxe-5.5-2.2.4.2.el5rhev

Fixes 3 records

TI-2010-00708 CVE-2010-0741 · GHSA-4pfr-xwjj-chc8

The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the…

MEDIUM 40

The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.03518 Published 2010-04-12 Fixed CWE-20

TI-2010-00408 CVE-2010-0430 · GHSA-5g9q-h772-m2pq

libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H…

LOW 33

libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memo…

CVSS 2.0HIGH 7.4 Adjacent network Low privileges Interaction — EPSS 0.0054 Published 2013-12-27 Fixed CWE-119

TI-2010-02132 CVE-2010-2223 · GHSA-q8g8-jjw3-wwpx

Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor…

LOW 11

Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 does not properly perform VM post-zeroing after the removal of a virtual machine's data…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00374 Published 2010-06-24 Fixed CWE-264