RHSA-2013:1260

csafUSredhat_csaf

Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

view advisory published 2013-09-23

An updated rhev-hypervisor6 package that fixes one security issue and various bugs is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2013-4130USmedium5.0—
The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly perform ring loops, which might…
02

references

External citations — patches, advisories, analysis.

03

remediations (1)

  • Fixedrhev-hypervisor6-0:6.4-20130912.1.el6_4.noarch as a component of RHEV Hypervisor for RHEL-6

    This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 To upgrade Hypervisors in Red Hat Enterprise Virtualization environments using the disk image provided by this package, refer to: https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html

    https://access.redhat.com/errata/RHSA-2013:1260
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan