Red Hat Security Advisory

RHSA-2014:0339

rhev-hypervisor6 security update

Released 2014-03-31 · Red Hat rating Important · View on Red Hat →

Fixed in

RHEV Hypervisor for RHEL-6 rhev-hypervisor6-6.5-20140324.0.el6ev

Fixes 3 records

TI-2014-00087 CVE-2014-0092 · GHSA-c9fv-cm23-r7xv

lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly…

MEDIUM 49

lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.2986 Published 2014-03-06 Partial fix CWE-310

TI-2013-01643 CVE-2013-1860 · GHSA-fw94-fp28-prw3

Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c…

LOW 32

Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximate attackers to cause a denial of service (system crash) or possibly exe…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00788 Published 2013-03-22 Fixed CWE-119

TI-2014-00051 CVE-2014-0055 · GHSA-gxfq-q7c4-j95v

The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux…

LOW 26

The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which…

CVSS 2.0MEDIUM 5.5 Adjacent network Low privileges Interaction — EPSS 0.0062 Published 2014-03-26 Fixed