Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization (RHEV) 2.2 does not properly accept TCP connections for SSL sessions, which allows remote attackers to cause a denial of service (daemon outage) via crafted SSL traffic.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_virtualization | Redhat | 2.2 (including) | 2.2 (including) |
| Red Hat Enterprise Virtualization for RHEL-5 | RedHat | vdsm22-0:4.5-62.14.el5_5rhev2_2 | * |
| Red Hat Enterprise Virtualization for RHEL-5 | RedHat | rhev-hypervisor-0:5.5-2.2.6.1.el5_5rhev2_2 | * |
References
- http://securitytracker.com/id?1024347
- http://www.securityfocus.com/bid/42580
- https://bugzilla.redhat.com/show_bug.cgi?id=622928
- https://rhn.redhat.com/errata/RHSA-2010-0622.html
- https://rhn.redhat.com/errata/RHSA-2010-0628.html
- http://securitytracker.com/id?1024347
- http://www.securityfocus.com/bid/42580
- https://bugzilla.redhat.com/show_bug.cgi?id=622928
- https://rhn.redhat.com/errata/RHSA-2010-0622.html
- https://rhn.redhat.com/errata/RHSA-2010-0628.html