{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 2023 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated rhev-hypervisor package that fixes one security issue and one\nbug is now available.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The rhev-hypervisor package provides a Red Hat Enterprise Virtualization\nHypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor\nis a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes\neverything necessary to run and manage virtual machines: A subset of the\nRed Hat Enterprise Linux operating environment and the Red Hat Enterprise\nVirtualization Agent.\n\nNote: Red Hat Enterprise Virtualization Hypervisor is only available for\nthe Intel 64 and AMD64 architectures with virtualization extensions.\n\nA NULL pointer dereference flaw was found in the Generic Receive Offload\n(GRO) functionality in the Linux kernel\u0027s networking implementation. If\nboth GRO and promiscuous mode were enabled on an interface in a virtual LAN\n(VLAN), it could result in a denial of service when a malformed VLAN frame\nis received on that interface. (CVE-2011-1478)\n\nRed Hat would like to thank Ryan Sweat for reporting CVE-2011-1478.\n\nThis updated package provides updated components that include fixes for\nsecurity issues; however, these issues have no security impact for Red Hat\nEnterprise Virtualization Hypervisor. These fixes are for dbus issue\nCVE-2010-4352; kernel issues CVE-2010-4346, CVE-2011-0521, CVE-2011-0710,\nCVE-2011-1010, and CVE-2011-1090; libvirt issue CVE-2011-1146; and openldap\nissue CVE-2011-1024.\n\nThis update also fixes the following bug:\n\n* Previously, network drivers that had Large Receive Offload (LRO) enabled\nby default caused the system to run slow when using software bridging. With\nthis update, Red Hat Enterprise Virtualization Hypervisor disables LRO as a\npart of a modprobe configuration. (BZ#692864)\n\nAlso in this erratum, the rhev-hypervisor-pxe RPM has been dropped.\n\nAs Red Hat Enterprise Virtualization Hypervisor includes Red Hat Enterprise\nVirtualization Manager Agent (VDSM), the bug fixes from the VDSM update\nRHBA-2011:0424 have been included in this update:\n\nhttps://rhn.redhat.com/errata/RHBA-2011-0424.html\n\nUsers of Red Hat Enterprise Virtualization Hypervisor are advised to\nupgrade to this updated package, which resolves these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2011:0439",
        "url": "https://access.redhat.com/errata/RHSA-2011:0439"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://rhn.redhat.com/errata/RHBA-2011-0424.html",
        "url": "https://rhn.redhat.com/errata/RHBA-2011-0424.html"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://access.redhat.com/security/data/csaf/v2/advisories/2011/rhsa-2011_0439.json"
      }
    ],
    "title": "Red Hat Security Advisory: rhev-hypervisor security and bug fix update",
    "tracking": {
      "current_release_date": "2011-04-13T11:00:00Z",
      "generator": {
        "date": "2023-06-30T20:16:00Z",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "3.18.0"
        }
      },
      "id": "RHSA-2011:0439",
      "initial_release_date": "2011-04-13T14:55:00Z",
      "revision_history": [
        {
          "date": "2011-04-13T11:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_family",
            "name": "Red Hat Virtualization",
            "product": {
              "name": "Red Hat Virtualization",
              "product_id": "Red Hat Virtualization"
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Ryan Sweat"
          ]
        }
      ],
      "cve": "CVE-2011-1478",
      "discovery_date": "2011-02-02T00:00:00Z",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla",
          "text": "https://bugzilla.redhat.com/show_bug.cgi?id=691270"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        },
        {
          "category": "description",
          "text": "The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel before 2.6.38 does not reset the values of certain structure members, which might allow remote attackers to cause a denial of service (NULL pointer dereference) via a malformed VLAN frame.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "reset dev and skb_iff on skb reuse",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Virtualization"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2011-1478",
          "url": "https://www.cve.org/CVERecord?id=CVE-2011-1478"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-1478",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-1478"
        },
        {
          "category": "external",
          "summary": "CVE-2011-1478",
          "url": "https://access.redhat.com/security/cve/CVE-2011-1478"
        },
        {
          "category": "external",
          "summary": "bz#691270: reset dev and skb_iff on skb reuse",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=691270"
        }
      ],
      "release_date": "2011-02-02T00:00:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259",
          "product_ids": [
            "Red Hat Virtualization"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2011:0439"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "availabilityRequirement": "NOT_DEFINED",
            "baseScore": 5.7,
            "collateralDamagePotential": "NOT_DEFINED",
            "confidentialityImpact": "NONE",
            "confidentialityRequirement": "NOT_DEFINED",
            "environmentalScore": 0.0,
            "exploitability": "NOT_DEFINED",
            "integrityImpact": "NONE",
            "integrityRequirement": "NOT_DEFINED",
            "remediationLevel": "NOT_DEFINED",
            "reportConfidence": "NOT_DEFINED",
            "targetDistribution": "NOT_DEFINED",
            "temporalScore": 0.0,
            "vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "Red Hat Virtualization"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2011-02-02T00:00:00Z",
          "details": "Moderate"
        }
      ],
      "title": "reset dev and skb_iff on skb reuse"
    }
  ]
}