rhsa-2013_1155
Vulnerability from csaf_redhat
Published
2013-08-13 16:10
Modified
2024-11-14 13:09
Summary
Red Hat Security Advisory: rhev 3.2.2 - vdsm security and bug fix update

Notes

Topic
Updated vdsm packages that fix one security issue and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. [Updated 21 August 2013] The packages list in this erratum has been updated to include missing packages for the "Red Hat Enterprise Virt Management Agent (v 6 x86_64)" channel (also known as "rhel-x86_64-rhev-mgmt-agent-6"). No changes have been made to the original packages.
Details
VDSM is a management module that serves as a Red Hat Enterprise Virtualization Manager agent on Red Hat Enterprise Virtualization Hypervisor or Red Hat Enterprise Linux hosts. It was found that the fix for CVE-2013-0167 released via RHSA-2013:0886 was incomplete. A privileged guest user could potentially use this flaw to make the host the guest is running on unavailable to the management server. (CVE-2013-4236) This issue was found by David Gibson of Red Hat. This update also fixes the following bugs: * Previously, failure to move a disk produced a 'truesize' exit message, which was not informative. Now, failure to move a disk produces a more helpful error message explaining that the volume is corrupted or missing. (BZ#985556) * The LVM filter has been updated to only access physical volumes by full /dev/mapper paths in order to improve performance. This replaces the previous behavior of scanning all devices including logical volumes on physical volumes. (BZ#983599) * The log collector now collects /var/log/sanlock.log from Hypervisors, to assist in debugging sanlock errors. (BZ#987042) * When the poollist parameter was not defined, dumpStorageTable crashed, causing SOS report generation to fail with the error 'IndexError: list index out of range'. VDSM now handles this exception, so the log collector can generate host SOS reports. (BZ#985069) * Previously, VDSM used the memAvailable parameter to report available memory on a host, which could return negative values if memory overcommitment was in use. Now, the new memFree parameter returns the actual amount of free memory on a host. (BZ#982639) All users managing Red Hat Enterprise Linux Virtualization hosts using Red Hat Enterprise Virtualization Manager are advised to install these updated packages, which fix these issues. These updated packages will be provided to users of Red Hat Enterprise Virtualization Hypervisor in the next rhev-hypervisor6 errata package.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated vdsm packages that fix one security issue and various bugs are now\navailable.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.\n\n[Updated 21 August 2013]\nThe packages list in this erratum has been updated to include missing\npackages for the \"Red Hat Enterprise Virt Management Agent (v 6 x86_64)\"\nchannel (also known as \"rhel-x86_64-rhev-mgmt-agent-6\"). No changes have\nbeen made to the original packages.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "VDSM is a management module that serves as a Red Hat Enterprise\nVirtualization Manager agent on Red Hat Enterprise Virtualization\nHypervisor or Red Hat Enterprise Linux hosts. \n\nIt was found that the fix for CVE-2013-0167 released via RHSA-2013:0886\nwas incomplete. A privileged guest user could potentially use this flaw to\nmake the host the guest is running on unavailable to the management\nserver. (CVE-2013-4236)\n\nThis issue was found by David Gibson of Red Hat.\n\nThis update also fixes the following bugs:\n\n* Previously, failure to move a disk produced a \u0027truesize\u0027 exit message,\nwhich was not informative. Now, failure to move a disk produces a more\nhelpful error message explaining that the volume is corrupted or missing.\n(BZ#985556)\n\n* The LVM filter has been updated to only access physical volumes by full\n/dev/mapper paths in order to improve performance. This replaces the\nprevious behavior of scanning all devices including logical volumes on\nphysical volumes. (BZ#983599)\n\n* The log collector now collects /var/log/sanlock.log from Hypervisors, to\nassist in debugging sanlock errors. (BZ#987042)\n\n* When the poollist parameter was not defined, dumpStorageTable crashed,\ncausing SOS report generation to fail with the error \u0027IndexError: list\nindex out of range\u0027. VDSM now handles this exception, so the log collector\ncan generate host SOS reports. (BZ#985069)\n\n* Previously, VDSM used the memAvailable parameter to report available\nmemory on a host, which could return negative values if memory\novercommitment was in use. Now, the new memFree parameter returns the\nactual amount of free memory on a host. (BZ#982639)\n\nAll users managing Red Hat Enterprise Linux Virtualization hosts using Red\nHat Enterprise Virtualization Manager are advised to install these updated\npackages, which fix these issues.\n\nThese updated packages will be provided to users of Red Hat Enterprise\nVirtualization Hypervisor in the next rhev-hypervisor6 errata package.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2013:1155",
        "url": "https://access.redhat.com/errata/RHSA-2013:1155"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://rhn.redhat.com/errata/RHSA-2013-0886.html",
        "url": "https://rhn.redhat.com/errata/RHSA-2013-0886.html"
      },
      {
        "category": "external",
        "summary": "982639",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=982639"
      },
      {
        "category": "external",
        "summary": "983599",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=983599"
      },
      {
        "category": "external",
        "summary": "985556",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=985556"
      },
      {
        "category": "external",
        "summary": "987042",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=987042"
      },
      {
        "category": "external",
        "summary": "996166",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1155.json"
      }
    ],
    "title": "Red Hat Security Advisory: rhev 3.2.2 - vdsm security and bug fix update",
    "tracking": {
      "current_release_date": "2024-11-14T13:09:43+00:00",
      "generator": {
        "date": "2024-11-14T13:09:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2013:1155",
      "initial_release_date": "2013-08-13T16:10:00+00:00",
      "revision_history": [
        {
          "date": "2013-08-13T16:10:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2013-08-21T17:07:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T13:09:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHEV-M 3.2",
                "product": {
                  "name": "RHEV-M 3.2",
                  "product_id": "6Server-RHEV-S-3.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhev_manager:3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "RHEV Agents (vdsm)",
                "product": {
                  "name": "RHEV Agents (vdsm)",
                  "product_id": "6Server-RHEV-Agents",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:6::hypervisor"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vdsm-0:4.10.2-24.0.el6ev.src",
                "product": {
                  "name": "vdsm-0:4.10.2-24.0.el6ev.src",
                  "product_id": "vdsm-0:4.10.2-24.0.el6ev.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm@4.10.2-24.0.el6ev?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
                "product": {
                  "name": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
                  "product_id": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-debuginfo@4.10.2-24.0.el6ev?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vdsm-0:4.10.2-24.0.el6ev.x86_64",
                "product": {
                  "name": "vdsm-0:4.10.2-24.0.el6ev.x86_64",
                  "product_id": "vdsm-0:4.10.2-24.0.el6ev.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm@4.10.2-24.0.el6ev?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
                "product": {
                  "name": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
                  "product_id": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-python@4.10.2-24.0.el6ev?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
                "product": {
                  "name": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
                  "product_id": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-bootstrap@4.10.2-24.0.el6ev?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
                "product": {
                  "name": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
                  "product_id": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-xmlrpc@4.10.2-24.0.el6ev?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
                "product": {
                  "name": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
                  "product_id": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-reg@4.10.2-24.0.el6ev?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
                "product": {
                  "name": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
                  "product_id": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-cli@4.10.2-24.0.el6ev?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
                "product": {
                  "name": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
                  "product_id": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vdsm-hook-vhostmd@4.10.2-24.0.el6ev?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-0:4.10.2-24.0.el6ev.src as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.src"
        },
        "product_reference": "vdsm-0:4.10.2-24.0.el6ev.src",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-0:4.10.2-24.0.el6ev.x86_64 as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.x86_64"
        },
        "product_reference": "vdsm-0:4.10.2-24.0.el6ev.x86_64",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-cli-0:4.10.2-24.0.el6ev.noarch"
        },
        "product_reference": "vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64 as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
        },
        "product_reference": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch"
        },
        "product_reference": "vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64 as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-python-0:4.10.2-24.0.el6ev.x86_64"
        },
        "product_reference": "vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-reg-0:4.10.2-24.0.el6ev.noarch"
        },
        "product_reference": "vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch as a component of RHEV Agents (vdsm)",
          "product_id": "6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch"
        },
        "product_reference": "vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
        "relates_to_product_reference": "6Server-RHEV-Agents"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-0:4.10.2-24.0.el6ev.src as a component of RHEV-M 3.2",
          "product_id": "6Server-RHEV-S-3.2:vdsm-0:4.10.2-24.0.el6ev.src"
        },
        "product_reference": "vdsm-0:4.10.2-24.0.el6ev.src",
        "relates_to_product_reference": "6Server-RHEV-S-3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch as a component of RHEV-M 3.2",
          "product_id": "6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch"
        },
        "product_reference": "vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
        "relates_to_product_reference": "6Server-RHEV-S-3.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64 as a component of RHEV-M 3.2",
          "product_id": "6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
        },
        "product_reference": "vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
        "relates_to_product_reference": "6Server-RHEV-S-3.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "David Gibson"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2013-4236",
      "discovery_date": "2013-07-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "996166"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become \"unavailable to the managment server\" via invalid XML characters in a guest agent response.  NOTE: this issue is due to an incomplete fix for CVE-2013-0167.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vdsm: incomplete fix for CVE-2013-0167 issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.src",
          "6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.x86_64",
          "6Server-RHEV-Agents:vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
          "6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
          "6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
          "6Server-RHEV-Agents:vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
          "6Server-RHEV-Agents:vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
          "6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
          "6Server-RHEV-S-3.2:vdsm-0:4.10.2-24.0.el6ev.src",
          "6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
          "6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-4236"
        },
        {
          "category": "external",
          "summary": "RHBZ#996166",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=996166"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4236",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-4236"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4236",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4236"
        }
      ],
      "release_date": "2013-07-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-08-13T16:10:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.src",
            "6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.x86_64",
            "6Server-RHEV-Agents:vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
            "6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
            "6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
            "6Server-RHEV-Agents:vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
            "6Server-RHEV-Agents:vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
            "6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
            "6Server-RHEV-S-3.2:vdsm-0:4.10.2-24.0.el6ev.src",
            "6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
            "6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1155"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 2.7,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:L/Au:S/C:N/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.src",
            "6Server-RHEV-Agents:vdsm-0:4.10.2-24.0.el6ev.x86_64",
            "6Server-RHEV-Agents:vdsm-cli-0:4.10.2-24.0.el6ev.noarch",
            "6Server-RHEV-Agents:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64",
            "6Server-RHEV-Agents:vdsm-hook-vhostmd-0:4.10.2-24.0.el6ev.noarch",
            "6Server-RHEV-Agents:vdsm-python-0:4.10.2-24.0.el6ev.x86_64",
            "6Server-RHEV-Agents:vdsm-reg-0:4.10.2-24.0.el6ev.noarch",
            "6Server-RHEV-Agents:vdsm-xmlrpc-0:4.10.2-24.0.el6ev.noarch",
            "6Server-RHEV-S-3.2:vdsm-0:4.10.2-24.0.el6ev.src",
            "6Server-RHEV-S-3.2:vdsm-bootstrap-0:4.10.2-24.0.el6ev.noarch",
            "6Server-RHEV-S-3.2:vdsm-debuginfo-0:4.10.2-24.0.el6ev.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vdsm: incomplete fix for CVE-2013-0167 issue"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.