Red Hat Security Advisory: rhev-hypervisor security and bug fix update
Updated rhev-hypervisor packages that fix multiple security issues and two bugs are now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2010-2811US | medium5.7 | — | ||
Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization (RHEV) 2.2 does not properly accept TCP connections for SSL sessions, which allows remote attackers to ca… | ||||
| CVE-2010-2784US | medium6.6 | — | ||
The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtuali… | ||||
| CVE-2010-0435US | medium4.6 | — | ||
The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial… | ||||
| CVE-2010-0431US | medium6.6 | — | ||
QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly validate guest QXL driver pointers, which al… | ||||
| CVE-2010-0429US | medium6.6 | — | ||
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upo… | ||||
| CVE-2010-0428US | medium6.6 | — | ||
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver… | ||||
references
External citations — patches, advisories, analysis.
- http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization_for_Servers/2.2/html/Technical_Notes/index.htmlexternal
- http://www.redhat.com/security/updates/classification/#importantexternal
- https://access.redhat.com/errata/RHSA-2010:0622self
- 568699external
- 568701external
- 568809external
- 570528external
- 619411external
remediations (18)
- Fixedrhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2.noarch as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2.noarch as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2.noarch as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2.noarch as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2.noarch as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2.noarch as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2.src as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2.src as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2.src as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2.src as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2.src as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2.src as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-pxe-0:5.5-2.2.6.1.el5_5rhev2_2.noarch as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-pxe-0:5.5-2.2.6.1.el5_5rhev2_2.noarch as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-pxe-0:5.5-2.2.6.1.el5_5rhev2_2.noarch as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-pxe-0:5.5-2.2.6.1.el5_5rhev2_2.noarch as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-pxe-0:5.5-2.2.6.1.el5_5rhev2_2.noarch as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622 - Fixedrhev-hypervisor-pxe-0:5.5-2.2.6.1.el5_5rhev2_2.noarch as a component of Red Hat Enterprise Virtualization Hypervisor 5
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2010:0622
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan