Red Hat Security AdvisoryRHSA-2019:1569
redhat-virtualization-host security and enhancement update
Released 2019-06-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-release-virtualization-host-4.3-0.8.el7, redhat-virtualization-host-image-update-placeholder-4.3-0.8.el7
- Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.3-20190610.0.el7_6, redhat-virtualization-host-image-update-4.3-20190610.0.el7_6
Fixes 1 record
Priority MEDIUM 41
It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04858 · Published 2019-03-26 · Fixed CWE-909