PT-2013-3560 · Red Hat · Red Hat Enterprise Virtualization Manager

Daniel Erez · Publicado 2013-07-03 · Atualizado 2013-07-04 · CVE-2013-2144

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Virtualization Manager (RHEVM) versions prior to 3.2

Description The issue allows attackers to cause a denial of service by consuming disk space through cloning a VM from a snapshot, due to improper permission checks for the target storage domain.

Recommendations For versions prior to 3.2, update to version 3.2 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-2144

RHSA-2013:0888

Produtos afetados

Red Hat Enterprise Virtualization Manager

Referências · 2

• http://rhn.redhat.com/errata/RHSA-2013-0888.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-2144 · Nota de Segurança