Red Hat Security AdvisoryRHSA-2011:0345
qemu-kvm security update
Released 2011-03-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-img-2:0.12.1.2-2.113.el6_0.8, qemu-kvm-2:0.12.1.2-2.113.el6_0.8, qemu-kvm-tools-2:0.12.1.2-2.113.el6_0.8
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-img-2:0.12.1.2-2.113.el6_0.8, qemu-kvm-2:0.12.1.2-2.113.el6_0.8, qemu-kvm-tools-2:0.12.1.2-2.113.el6_0.8
- Red Hat Enterprise Linux Server (v. 6) qemu-img-2:0.12.1.2-2.113.el6_0.8, qemu-kvm-2:0.12.1.2-2.113.el6_0.8, qemu-kvm-tools-2:0.12.1.2-2.113.el6_0.8
- Red Hat Enterprise Linux Workstation (v. 6) qemu-img-2:0.12.1.2-2.113.el6_0.8, qemu-kvm-2:0.12.1.2-2.113.el6_0.8, qemu-kvm-tools-2:0.12.1.2-2.113.el6_0.8
Fixes 1 record
Priority LOW 23
qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions.
CVSS 2.0MEDIUM 4.3· Adjacent network · No auth · Interaction — · EPSS 0.0129 · Published 2012-06-21 · Fixed CWE-287
