Red Hat Security Advisory

RHSA-2012:0531

rhev-hypervisor6 security and bug fix update

Released 2012-04-30 · Red Hat rating Important · View on Red Hat →

Fixed in

RHEV Hypervisor for RHEL-6 rhev-hypervisor6-6.2-20120423.1.el6_2, rhev-hypervisor6-tools-6.2-20120423.1.el6_2

Fixes 3 records

TI-2012-00799 CVE-2012-0864 · GHSA-x2p4-f3vf-gwp3

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and…

LOW 35

Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, a…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02717 Published 2013-05-02 Partial fix CWE-189

TI-2012-01365 CVE-2012-1573 · GHSA-h34x-7v7j-22v5

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not…

LOW 30

gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04155 Published 2012-03-26 Partial fix CWE-310

TI-2012-01361 CVE-2012-1569 · GHSA-jcv4-2hjq-vv2c

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in…

LOW 30

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0441 Published 2012-03-26 Partial fix CWE-189