RHSA-2013:0886
Vulnerability from csaf_redhat
Published
2013-06-10 20:18
Modified
2024-11-14 12:15
Summary
Red Hat Security Advisory: rhev 3.2 - vdsm security and bug fix update

Notes

Topic
Updated vdsm packages that fix one security issue and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
Details
VDSM is a management module that serves as a Red Hat Enterprise Virtualization Manager agent on Red Hat Enterprise Virtualization Hypervisor or Red Hat Enterprise Linux hosts. A flaw was found in the way unexpected fields in guestInfo dictionaries were processed. A privileged guest user could potentially use this flaw to make the host the guest is running on unavailable to the management server. (CVE-2013-0167) The CVE-2013-0167 issue was discovered by Dan Kenigsberg of the Red Hat Enterprise Virtualization team. This update also fixes various bugs. Refer to the Technical Notes for information about these changes: https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.2/html/Technical_Notes/chap-RHSA-2013-0886.html All users managing Red Hat Enterprise Linux Virtualization hosts using Red Hat Enterprise Virtualization Manager are advised to install these updated packages, which fix these issues. These updated packages will be provided to users of Red Hat Enterprise Virtualization Hypervisor in the next rhev-hypervisor6 errata package.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated vdsm packages that fix one security issue and various bugs are now\navailable.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "VDSM is a management module that serves as a Red Hat Enterprise\nVirtualization Manager agent on Red Hat Enterprise Virtualization\nHypervisor or Red Hat Enterprise Linux hosts.\n\nA flaw was found in the way unexpected fields in guestInfo dictionaries\nwere processed. A privileged guest user could potentially use this flaw to\nmake the host the guest is running on unavailable to the management\nserver. (CVE-2013-0167)\n\nThe CVE-2013-0167 issue was discovered by Dan Kenigsberg of the Red Hat\nEnterprise Virtualization team.\n\nThis update also fixes various bugs. Refer to the Technical Notes for\ninformation about these changes:\n\nhttps://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.2/html/Technical_Notes/chap-RHSA-2013-0886.html\n\nAll users managing Red Hat Enterprise Linux Virtualization hosts using Red\nHat Enterprise Virtualization Manager are advised to install these updated\npackages, which fix these issues.\n\nThese updated packages will be provided to users of Red Hat Enterprise\nVirtualization Hypervisor in the next rhev-hypervisor6 errata package.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2013:0886",
        "url": "https://access.redhat.com/errata/RHSA-2013:0886"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.2/html/Technical_Notes/chap-RHSA-2013-0886.html",
        "url": "https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.2/html/Technical_Notes/chap-RHSA-2013-0886.html"
      },
      {
        "category": "external",
        "summary": "834041",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=834041"
      },
      {
        "category": "external",
        "summary": "852956",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=852956"
      },
      {
        "category": "external",
        "summary": "861701",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=861701"
      },
      {
        "category": "external",
        "summary": "871616",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=871616"
      },
      {
        "category": "external",
        "summary": "873145",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=873145"
      },
      {
        "category": "external",
        "summary": "875487",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=875487"
      },
      {
        "category": "external",
        "summary": "875775",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=875775"
      },
      {
        "category": "external",
        "summary": "878064",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=878064"
      },
      {
        "category": "external",
        "summary": "879253",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=879253"
      },
      {
        "category": "external",
        "summary": "880961",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=880961"
      },
      {
        "category": "external",
        "summary": "881947",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=881947"
      },
      {
        "category": "external",
        "summary": "882276",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=882276"
      },
      {
        "category": "external",
        "summary": "882667",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=882667"
      },
      {
        "category": "external",
        "summary": "883327",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=883327"
      },
      {
        "category": "external",
        "summary": "883390",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=883390"
      },
      {
        "category": "external",
        "summary": "885418",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=885418"
      },
      {
        "category": "external",
        "summary": "890572",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=890572"
      },
      {
        "category": "external",
        "summary": "890983",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=890983"
      },
      {
        "category": "external",
        "summary": "893193",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=893193"
      },
      {
        "category": "external",
        "summary": "893332",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=893332"
      },
      {
        "category": "external",
        "summary": "895912",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895912"
      },
      {
        "category": "external",
        "summary": "905930",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=905930"
      },
      {
        "category": "external",
        "summary": "910445",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=910445"
      },
      {
        "category": "external",
        "summary": "911209",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=911209"
      },
      {
        "category": "external",
        "summary": "911417",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=911417"
      },
      {
        "category": "external",
        "summary": "912308",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=912308"
      },
      {
        "category": "external",
        "summary": "915068",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=915068"
      },
      {
        "category": "external",
        "summary": "917363",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=917363"
      },
      {
        "category": "external",
        "summary": "918541",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=918541"
      },
      {
        "category": "external",
        "summary": "918666",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=918666"
      },
      {
        "category": "external",
        "summary": "919201",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=919201"
      },
      {
        "category": "external",
        "summary": "919356",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=919356"
      },
      {
        "category": "external",
        "summary": "920532",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=920532"
      },
      {
        "category": "external",
        "summary": "920614",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=920614"
      },
      {
        "category": "external",
        "summary": "920671",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=920671"
      },
      {
        "category": "external",
        "summary": "920688",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=920688"
      },
      {
        "category": "external",
        "summary": "922515",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=922515"
      },
      {
        "category": "external",
        "summary": "923773",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=923773"
      },
      {
        "category": "external",
        "summary": "923964",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=923964"
      },
      {
        "category": "external",
        "summary": "925967",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=925967"
      },
      {
        "category": "external",
        "summary": "925981",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=925981"
      },
      {
        "category": "external",
        "summary": "927143",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=927143"
      },
      {
        "category": "external",
        "summary": "928217",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=928217"
      },
      {
        "category": "external",
        "summary": "928861",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=928861"
      },
      {
        "category": "external",
        "summary": "948346",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=948346"
      },
      {
        "category": "external",
        "summary": "948940",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=948940"
      },
      {
        "category": "external",
        "summary": "949192",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=949192"
      },
      {
        "category": "external",
        "summary": "951057",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=951057"
      },
      {
        "category": "external",
        "summary": "955593",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=955593"
      },
      {
        "category": "external",
        "summary": "956683",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=956683"
      },
      {
        "category": "external",
        "summary": "962549",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=962549"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0886.json"
      }
    ],
    "title": "Red Hat Security Advisory: rhev 3.2 - vdsm security and bug fix update",
    "tracking": {
      "current_release_date": "2024-11-14T12:15:48+00:00",
      "generator": {
        "date": "2024-11-14T12:15:48+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2013:0886",
      "initial_release_date": "2013-06-10T20:18:00+00:00",
      "revision_history": [
        {
          "date": "2013-06-10T20:18:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2013-06-10T20:25:02+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T12:15:48+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHEV Agents (vdsm)",
                "product": {
                  "name": "RHEV Agents (vdsm)",
                  "product_id": "6Server-RHEV-Agents",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:6::hypervisor"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "RHEV-M 3.2",
                "product": {
                  "name": "RHEV-M 3.2",
                  "product_id": "6Server-RHEV-S-3.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhev_manager:3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vdsm-xmlrpc-0:4.10.2-22.0.el6ev.noarch",
                "product": {
                  "name": "vdsm-xmlrpc-0:4.10.2-22.0.el6ev.noarch",
                  "product_id": "vdsm-xmlrpc-0:4.10.2-22.0.el6ev.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-xmlrpc@4.10.2-22.0.el6ev?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vdsm-cli-0:4.10.2-22.0.el6ev.noarch",
                "product": {
                  "name": "vdsm-cli-0:4.10.2-22.0.el6ev.noarch",
                  "product_id": "vdsm-cli-0:4.10.2-22.0.el6ev.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-cli@4.10.2-22.0.el6ev?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vdsm-reg-0:4.10.2-22.0.el6ev.noarch",
                "product": {
                  "name": "vdsm-reg-0:4.10.2-22.0.el6ev.noarch",
                  "product_id": "vdsm-reg-0:4.10.2-22.0.el6ev.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-reg@4.10.2-22.0.el6ev?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vdsm-hook-vhostmd-0:4.10.2-22.0.el6ev.noarch",
                "product": {
                  "name": "vdsm-hook-vhostmd-0:4.10.2-22.0.el6ev.noarch",
                  "product_id": "vdsm-hook-vhostmd-0:4.10.2-22.0.el6ev.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-hook-vhostmd@4.10.2-22.0.el6ev?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vdsm-bootstrap-0:4.10.2-22.0.el6ev.noarch",
                "product": {
                  "name": "vdsm-bootstrap-0:4.10.2-22.0.el6ev.noarch",
                  "product_id": "vdsm-bootstrap-0:4.10.2-22.0.el6ev.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-bootstrap@4.10.2-22.0.el6ev?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vdsm-python-0:4.10.2-22.0.el6ev.x86_64",
                "product": {
                  "name": "vdsm-python-0:4.10.2-22.0.el6ev.x86_64",
                  "product_id": "vdsm-python-0:4.10.2-22.0.el6ev.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-python@4.10.2-22.0.el6ev?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vdsm-0:4.10.2-22.0.el6ev.x86_64",
                "product": {
                  "name": "vdsm-0:4.10.2-22.0.el6ev.x86_64",
                  "product_id": "vdsm-0:4.10.2-22.0.el6ev.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm@4.10.2-22.0.el6ev?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64",
                "product": {
                  "name": "vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64",
                  "product_id": "vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-debuginfo@4.10.2-22.0.el6ev?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vdsm-0:4.10.2-22.0.el6ev.src",
                "product": {
                  "name": "vdsm-0:4.10.2-22.0.el6ev.src",
                  "product_id": "vdsm-0:4.10.2-22.0.el6ev.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm@4.10.2-22.0.el6ev?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-0:4.10.2-22.0.el6ev.src as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-0:4.10.2-22.0.el6ev.src"
        },
        "product_reference": "vdsm-0:4.10.2-22.0.el6ev.src",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-0:4.10.2-22.0.el6ev.x86_64 as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-0:4.10.2-22.0.el6ev.x86_64"
        },
        "product_reference": "vdsm-0:4.10.2-22.0.el6ev.x86_64",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-cli-0:4.10.2-22.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-cli-0:4.10.2-22.0.el6ev.noarch"
        },
        "product_reference": "vdsm-cli-0:4.10.2-22.0.el6ev.noarch",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64 as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64"
        },
        "product_reference": "vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-hook-vhostmd-0:4.10.2-22.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-22.0.el6ev.noarch"
        },
        "product_reference": "vdsm-hook-vhostmd-0:4.10.2-22.0.el6ev.noarch",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-python-0:4.10.2-22.0.el6ev.x86_64 as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-python-0:4.10.2-22.0.el6ev.x86_64"
        },
        "product_reference": "vdsm-python-0:4.10.2-22.0.el6ev.x86_64",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-reg-0:4.10.2-22.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-reg-0:4.10.2-22.0.el6ev.noarch"
        },
        "product_reference": "vdsm-reg-0:4.10.2-22.0.el6ev.noarch",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-xmlrpc-0:4.10.2-22.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-22.0.el6ev.noarch"
        },
        "product_reference": "vdsm-xmlrpc-0:4.10.2-22.0.el6ev.noarch",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-0:4.10.2-22.0.el6ev.src as a component of RHEV-M 3.2",
          "product_id": "6Server-RHEV-S-3.2:vdsm-0:4.10.2-22.0.el6ev.src"
        },
        "product_reference": "vdsm-0:4.10.2-22.0.el6ev.src",
        "relates_to_product_reference": "6Server-RHEV-S-3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-bootstrap-0:4.10.2-22.0.el6ev.noarch as a component of RHEV-M 3.2",
          "product_id": "6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-22.0.el6ev.noarch"
        },
        "product_reference": "vdsm-bootstrap-0:4.10.2-22.0.el6ev.noarch",
        "relates_to_product_reference": "6Server-RHEV-S-3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64 as a component of RHEV-M 3.2",
          "product_id": "6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64"
        },
        "product_reference": "vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64",
        "relates_to_product_reference": "6Server-RHEV-S-3.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Dan Kenigsberg"
          ],
          "organization": "Red Hat Enterprise Virtualization team",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2013-0167",
      "discovery_date": "2012-12-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "893332"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via guestInfo dictionaries with \"unexpected fields.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vdsm: unfiltered guestInfo dictionary DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHEV-Agents:vdsm-0:4.10.2-22.0.el6ev.src",
          "6Server-RHEV-Agents:vdsm-0:4.10.2-22.0.el6ev.x86_64",
          "6Server-RHEV-Agents:vdsm-cli-0:4.10.2-22.0.el6ev.noarch",
          "6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64",
          "6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-22.0.el6ev.noarch",
          "6Server-RHEV-Agents:vdsm-python-0:4.10.2-22.0.el6ev.x86_64",
          "6Server-RHEV-Agents:vdsm-reg-0:4.10.2-22.0.el6ev.noarch",
          "6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-22.0.el6ev.noarch",
          "6Server-RHEV-S-3.2:vdsm-0:4.10.2-22.0.el6ev.src",
          "6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-22.0.el6ev.noarch",
          "6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-0167"
        },
        {
          "category": "external",
          "summary": "RHBZ#893332",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=893332"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0167",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-0167"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0167",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0167"
        }
      ],
      "release_date": "2013-06-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-06-10T20:18:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "6Server-RHEV-Agents:vdsm-0:4.10.2-22.0.el6ev.src",
            "6Server-RHEV-Agents:vdsm-0:4.10.2-22.0.el6ev.x86_64",
            "6Server-RHEV-Agents:vdsm-cli-0:4.10.2-22.0.el6ev.noarch",
            "6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64",
            "6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-22.0.el6ev.noarch",
            "6Server-RHEV-Agents:vdsm-python-0:4.10.2-22.0.el6ev.x86_64",
            "6Server-RHEV-Agents:vdsm-reg-0:4.10.2-22.0.el6ev.noarch",
            "6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-22.0.el6ev.noarch",
            "6Server-RHEV-S-3.2:vdsm-0:4.10.2-22.0.el6ev.src",
            "6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-22.0.el6ev.noarch",
            "6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0886"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 2.7,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:L/Au:S/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-RHEV-Agents:vdsm-0:4.10.2-22.0.el6ev.src",
            "6Server-RHEV-Agents:vdsm-0:4.10.2-22.0.el6ev.x86_64",
            "6Server-RHEV-Agents:vdsm-cli-0:4.10.2-22.0.el6ev.noarch",
            "6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64",
            "6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-22.0.el6ev.noarch",
            "6Server-RHEV-Agents:vdsm-python-0:4.10.2-22.0.el6ev.x86_64",
            "6Server-RHEV-Agents:vdsm-reg-0:4.10.2-22.0.el6ev.noarch",
            "6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-22.0.el6ev.noarch",
            "6Server-RHEV-S-3.2:vdsm-0:4.10.2-22.0.el6ev.src",
            "6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-22.0.el6ev.noarch",
            "6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-22.0.el6ev.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vdsm: unfiltered guestInfo dictionary DoS"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.