Red Hat Security AdvisoryRHSA-2012:0109
rhev-hypervisor6 security and bug fix update
Released 2012-02-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEV Hypervisor for RHEL-6 rhev-hypervisor6-6.2-20120209.0.el6_2, rhev-hypervisor6-tools-6.2-20120209.0.el6_2
Fixes 4 records
Priority MEDIUM 40
The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption)…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.17839 · Published 2012-01-06 · Partial fix CWE-399
Priority LOW 39
The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decry…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.15575 · Published 2012-01-06 · Partial fix CWE-310
Priority LOW 34
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly e…
CVSS 2.0HIGH 7.4· Adjacent network · Low privileges · Interaction — · EPSS 0.00904 · Published 2012-01-27 · Partial fix CWE-119
Priority LOW 31
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data assoc…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.08193 · Published 2012-01-06 · Fixed CWE-399