Red Hat Security AdvisoryRHSA-2012:1236
xen security update
Released 2012-09-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Multi OS (v. 5 client) xen-3.0.3-135.el5_8.5, xen-3.0.3-135.el5_8.5.i386, xen-devel-3.0.3-135.el5_8.5 +1
- RHEL Virtualization (v. 5 server) xen-3.0.3-135.el5_8.5, xen-3.0.3-135.el5_8.5.i386, xen-3.0.3-135.el5_8.5.ia64 +3
- Red Hat Enterprise Linux (v. 5 server) xen-3.0.3-135.el5_8.5, xen-libs-3.0.3-135.el5_8.5, xen-libs-3.0.3-135.el5_8.5.i386 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) xen-3.0.3-135.el5_8.5, xen-libs-3.0.3-135.el5_8.5, xen-libs-3.0.3-135.el5_8.5.i386
Fixes 1 record
Priority LOW 32
Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers t…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00528 · Published 2012-11-23 · Partial fix CWE-20
