Red Hat Security Advisory

RHSA-2013:0746

rhev-hypervisor6 security and bug fix update

Released 2013-04-23 · Red Hat rating Important · View on Red Hat →

Fixed in

RHEV Hypervisor for RHEL-6 rhev-hypervisor6-6.4-20130415.0.el6_4

Fixes 4 records

TI-2013-01398 CVE-2013-1591 · GHSA-7rw2-cfj2-g8vr

Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly…

MEDIUM 48

Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03626 Published 2013-01-31 Fixed CWE-190

TI-2013-01583 CVE-2013-1797 · GHSA-3fq7-5q53-mpg7

Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4…

LOW 32

Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted…

CVSS 2.0MEDIUM 6.8 Adjacent network No auth Interaction — EPSS 0.00894 Published 2013-03-22 Partial fix CWE-399

TI-2013-01582 CVE-2013-1796 · GHSA-xr82-v4c6-wp6r

The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4…

LOW 32

The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment during an MSR_KVM_SYSTEM_TIME operation, which allows guest OS users to cause a denia…

CVSS 2.0MEDIUM 6.8 Adjacent network No auth Interaction — EPSS 0.00946 Published 2013-03-22 Partial fix CWE-119

TI-2013-01584 CVE-2013-1798 · GHSA-2r7v-v86r-776v

The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4…

LOW 30

The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS…

CVSS 2.0MEDIUM 6.2 Adjacent network No auth Interaction — EPSS 0.0135 Published 2013-03-22 Partial fix CWE-20