Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2013-0167

Published: Aug 19, 2013 | Modified: Aug 20, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.7 LOW
AV:A/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
2.7 MODERATE
AV:A/AC:L/Au:S/C:N/I:N/A:P
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2013-0167
CWEhttps://cwe.mitre.org/data/definitions/NVD-Other.html

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become unavailable to the managment server via guestInfo dictionaries with unexpected fields.

Affected Software

Name Vendor Start Version End Version
Enterprise_virtualization Redhat 3.0 (including) 3.0 (including)
Enterprise_virtualization Redhat 3.2 (including) 3.2 (including)
RHEV 3.X Hypervisor and Agents for RHEL-6 RedHat vdsm-0:4.10.2-22.0.el6ev *
RHEV 3.X Hypervisor and Agents for RHEL-6 RedHat rhev-hypervisor6-0:6.4-20130528.0.el6_4 *
RHEV Manager version 3.2 RedHat vdsm-0:4.10.2-22.0.el6ev *

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use