CVE Vulnerabilities

CVE-2013-4236

Published: Aug 19, 2013 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.7 LOW
AV:A/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
2.7 MODERATE
AV:A/AC:L/Au:S/C:N/I:N/A:P
RedHat/V3
Ubuntu

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become unavailable to the managment server via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.

Affected Software

Name Vendor Start Version End Version
Enterprise_virtualization Redhat 3.0 (including) 3.0 (including)
Enterprise_virtualization Redhat 3.2 (including) 3.2 (including)
RHEV 3.X Hypervisor and Agents for RHEL-6 RedHat vdsm-0:4.10.2-24.0.el6ev *
RHEV 3.X Hypervisor and Agents for RHEL-6 RedHat rhev-hypervisor6-0:6.4-20130815.0.el6_4 *
RHEV Manager version 3.2 RedHat vdsm-0:4.10.2-24.0.el6ev *

References