Red Hat Security AdvisoryRHSA-2011:0391
libvirt security update
Released 2011-03-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Virtualization (v. 5 server) libvirt-0.8.2-15.el5_6.3, libvirt-0.8.2-15.el5_6.3.i386, libvirt-0.8.2-15.el5_6.3.ia64 +6
- Red Hat Enterprise Linux Desktop (v. 6) libvirt-0.8.1-27.el6_0.5, libvirt-client-0.8.1-27.el6_0.5, libvirt-python-0.8.1-27.el6_0.5
- Red Hat Enterprise Linux Desktop Optional (v. 6) libvirt-0.8.1-27.el6_0.5, libvirt-devel-0.8.1-27.el6_0.5
- Red Hat Enterprise Linux HPC Node (v. 6) libvirt-0.8.1-27.el6_0.5, libvirt-client-0.8.1-27.el6_0.5, libvirt-python-0.8.1-27.el6_0.5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libvirt-0.8.1-27.el6_0.5, libvirt-devel-0.8.1-27.el6_0.5
- Red Hat Enterprise Linux Server (v. 6) libvirt-0.8.1-27.el6_0.5, libvirt-client-0.8.1-27.el6_0.5, libvirt-client-0.8.1-27.el6_0.5.ppc +3
- Red Hat Enterprise Linux Workstation (v. 6) libvirt-0.8.1-27.el6_0.5, libvirt-client-0.8.1-27.el6_0.5, libvirt-devel-0.8.1-27.el6_0.5 +1
Fixes 1 record
Priority LOW 34
libvirt.c in the API in Red Hat libvirt 0.8.8 does not properly restrict operations in a read-only connection, which allows remote attackers to cause a denial of service (host OS crash) or possibly execute arbitrary code…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.01648 · Published 2011-03-15 · Partial fix CWE-264
