Red Hat Security AdvisoryRHSA-2013:1527
rhev-hypervisor6 security and bug fix update
Released 2013-11-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEV Hypervisor for RHEL-6 rhev-hypervisor6-6.5-20131115.0.3.2.el6_5
Fixes 6 records
Priority MEDIUM 50
The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connecti…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.16946 · Published 2013-03-07 · Partial fix CWE-400
Priority LOW 32
Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00434 · Published 2013-10-04 · Fixed CWE-120
Priority LOW 28
The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-th…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05347 · Published 2013-08-18 · Fixed CWE-20
Priority LOW 28
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of ser…
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00459 · Published 2013-09-13 · Fixed CWE-20
Priority LOW 22
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00423 · Published 2013-09-13 · Fixed CWE-119
Priority LOW 22
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based o…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00419 · Published 2013-09-13 · Fixed CWE-119