Oracle Linux 5 : libvirt (ELSA-2013-0127)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0127 advisory. 0.8.2-29.0.1.el5 - Replaced docs/et.png in tarball - remove virshtest from test cases to fix failure in mock build root libvirt-0.8.2-29.el5 - Coverity pointed...

Oracle Linux 6 : libvirt (ELSA-2012-1359)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1359 advisory. - security: Fix libvirtd crash possibility CVE-2012-4423 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 6 : libvirt (ELSA-2012-1202)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1202 advisory. libvirt-0.9.10-21.0.1.el63.4 - Replace docs/et.png in tarball with blank image libvirt-0.9.10-21.el63.4 - daemon: Fix crash in virTypedParameterArrayClear...

[USN-1895-1] libvirt vulnerability

========================================================================== Ubuntu Security Notice USN-1895-1 July 02, 2013 libvirt vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...

libvirt DoS

Resources exhaustion...

Ubuntu Update for libvirt USN-1895-1

Check for the Version of libvirt OpenVAS Vulnerability Test $Id: gbubuntuUSN18951.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for libvirt USN-1895-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

Ubuntu: Security Advisory (USN-1895-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 13.04 : libvirt vulnerability (USN-1895-1)

It was discovered that libvirt incorrectly handled certain storage pool requests. A remote attacker could use this issue to cause libvirt to consume resources, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubun...

USN-1895-1: libvirt vulnerability

It was discovered that libvirt incorrectly handled certain storage pool requests. A remote attacker could use this issue to cause libvirt to consume resources, resulting in a denial of service...

libvirt - 'virConnectListAllInterfaces' Method Denial of Service

source: https://www.securityfocus.com/bid/60876/info libvirt is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the application that uses the affected library, denying service to legitimate users. virsh -c qemu:///system --readonly iface-list --inactive...

libvirt - virConnectListAllInterfaces Method Denial of Service

libvirt - virConnectListAllInterfaces Method Denial of Service source: https://www.securityfocus.com/bid/60876/info libvirt is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the application that uses the affected library, denying service to legitimate users...

CentOS 6 : libvirt (CESA-2013:0199)

Updated libvirt packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

libxl allows guest write access to sensitive console related xenstore keys

ISSUE DESCRIPTION The libxenlight libxl toolstack library does not correctly set permissions on xenstore keys relating to paravirtualised and emulated serial console devices. This could allow a malicious guest administrator to change values in xenstore which the host later relies on being...

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes two security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Fedora Update for heat-jeos FEDORA-2013-9708

Check for the Version of heat-jeos OpenVAS Vulnerability Test Fedora Update for heat-jeos FEDORA-2013-9708 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

[SECURITY] Fedora 18 Update: heat-jeos-9-1.fc18

This is a project for creating Just Enough Operating System images for heat. This project supports the following features: - Creates TDL files for use with oz - Creates compressed qcow2 files for use with libvirt/glance - Registers image files with glance...

MGASA-2013-0166 Updated libvirt packages fix security vulnerability

It was found that libvirtd leaked file descriptors when listing all volumes for a particular pool. A remote attacker able to establish a read-only connection to libvirtd could use this flaw to cause libvirtd to consume all available file descriptors, preventing other users from using libvirtd...

Fedora Update for libvirt FEDORA-2013-8681

Check for the Version of libvirt OpenVAS Vulnerability Test Fedora Update for libvirt FEDORA-2013-8681 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libvirt FEDORA-2013-8681

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1962

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service file descriptor consumption via a large number of requests "to list all volumes for the particular pool."...