PT-2013-2143 · Red Hat · Red Hat Enterprise Virtualization

Dan Kenigsberg · Published 2013-08-19 · Updated 2013-08-20 · CVE-2013-0167

Positive Technologies (AI Summary)

CVSS v2.0

2.7

Low

Base vector

AV:A/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Virtualization versions 3 and 3.2

Description The issue allows privileged guest users to cause the host to become unavailable to the management server by utilizing guestInfo dictionaries with unexpected fields.

Recommendations For Red Hat Enterprise Virtualization versions 3 and 3.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2013-0167

RHSA-2013:0886

RHSA-2013:0907

Affected Products

Red Hat Enterprise Virtualization

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-0167 · Security Note
• https://rhn.redhat.com/errata/RHSA-2013-0907.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2013-0886.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=893332 · Note