Lucene search

RedhatCVE-2013-0167

HistoryAug 19, 2013 - 11:55 p.m.

CVE-2013-0167

2013-08-1923:55:08

redhat

web.nvd.nist.gov

cve-2013-0167

vdsm

red hat enterprise virtualization

guestinfo

unexpected fields

nvd

CVSS2

2.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:N/I:N/A:P

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

20.8%

JSON

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become “unavailable to the managment server” via guestInfo dictionaries with “unexpected fields.”

Affected configurations

Nvd

Node

redhatenterprise_virtualizationMatch3.0

redhatenterprise_virtualizationMatch3.2

VendorProductVersionCPE
redhatenterprise_virtualization3.0cpe:2.3:a:redhat:enterprise_virtualization:3.0:*:*:*:*:*:*:*
redhatenterprise_virtualization3.2cpe:2.3:a:redhat:enterprise_virtualization:3.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	enterprise_virtualization	3.0	cpe:2.3:a:redhat:enterprise_virtualization:3.0:::::::*
redhat	enterprise_virtualization	3.2	cpe:2.3:a:redhat:enterprise_virtualization:3.2:::::::*

References

bugzilla.redhat.com/show_bug.cgi?id=893332

rhn.redhat.com/errata/RHSA-2013-0886.html

rhn.redhat.com/errata/RHSA-2013-0907.html

CVSS2

2.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:N/I:N/A:P

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

20.8%

JSON

Related for CVE-2013-0167