Red Hat Security Advisory

RHSA-2013:0579

rhev-hypervisor6 security, bug fix, and enhancement update

Released 2013-02-28 · Red Hat rating Important · View on Red Hat →

Fixed in

RHEV Hypervisor for RHEL-6 rhev-hypervisor6-6.4-20130221.0.el6

Fixes 3 records

TI-2012-02941 CVE-2012-3411 · GHSA-gj79-j4q7-5h4x

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to…

LOW 31

Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DN…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0507 Published 2013-03-04 Partial fix CWE-20

TI-2013-00241 CVE-2013-0311 · GHSA-783c-mvqh-hj8j

The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does…

LOW 30

The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS p…

CVSS 2.0MEDIUM 6.5 Adjacent network Low privileges Interaction — EPSS 0.00644 Published 2013-02-22 Fixed

TI-2012-03882 CVE-2012-4542 · GHSA-jcfv-wjcf-phjg

block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI…

LOW 21

block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SG_IO ioct…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00349 Published 2013-02-28 Partial fix CWE-264