Red Hat Security AdvisoryRHSA-2013:1272
libvirt security and bug fix update
Released 2013-09-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libvirt-0.10.2-18.el6_4.14, libvirt-client-0.10.2-18.el6_4.14, libvirt-python-0.10.2-18.el6_4.14
- Red Hat Enterprise Linux Desktop Optional (v. 6) libvirt-0.10.2-18.el6_4.14, libvirt-devel-0.10.2-18.el6_4.14, libvirt-lock-sanlock-0.10.2-18.el6_4.14
- Red Hat Enterprise Linux HPC Node (v. 6) libvirt-0.10.2-18.el6_4.14, libvirt-client-0.10.2-18.el6_4.14, libvirt-python-0.10.2-18.el6_4.14
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libvirt-0.10.2-18.el6_4.14, libvirt-devel-0.10.2-18.el6_4.14, libvirt-lock-sanlock-0.10.2-18.el6_4.14
- Red Hat Enterprise Linux Server (v. 6) libvirt-0.10.2-18.el6_4.14, libvirt-client-0.10.2-18.el6_4.14, libvirt-client-0.10.2-18.el6_4.14.ppc +3
- Red Hat Enterprise Linux Server Optional (v. 6) libvirt-0.10.2-18.el6_4.14, libvirt-lock-sanlock-0.10.2-18.el6_4.14
- Red Hat Enterprise Linux Workstation (v. 6) libvirt-0.10.2-18.el6_4.14, libvirt-client-0.10.2-18.el6_4.14, libvirt-devel-0.10.2-18.el6_4.14 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libvirt-0.10.2-18.el6_4.14, libvirt-lock-sanlock-0.10.2-18.el6_4.14
Fixes 2 records
Priority LOW 24
The remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x, 0.10.2.x before 0.10.2.8, 1.0.x before 1.0.5.6, and 1.1.x before 1.1.2 allows remote authenticated users to cause a denia…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.02678 · Published 2013-09-30 · Fixed CWE-119
Priority LOW 21
libvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition in pkcheck v…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00404 · Published 2013-10-03 · Partial fix CWE-264
