Red Hat Security AdvisoryRHSA-2014:0629
rhev-hypervisor6 security update
Released 2014-06-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEV Hypervisor for RHEL-6 rhev-hypervisor6-6.5-20140603.1.el6ev
Fixes 2 records
Priority HIGH 76
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key…
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.95326 · Published 2014-06-05 · Partial fix CWE-326
Priority LOW 26
drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service (memory corruption and host…
CVSS 2.0MEDIUM 5.5· Adjacent network · Low privileges · Interaction — · EPSS 0.0081 · Published 2014-04-14 · Fixed CWE-787
