RHEL 6 : rhev-guest-tools-iso (RHSA-2013:1122)

An updated rhev-guest-tools-iso package that fixes one security issue and two bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 6 : rhevm-spice-client (RHSA-2014:0416)

Updated rhevm-spice-client packages that fix multiple security issues are now available for Red Hat Enterprise Virtualization Manager 3. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Fedora Update for spice-gtk FEDORA-2014-8183

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: spice-gtk-0.23-3.fc20

Client libraries for SPICE desktop servers...

Joomla Component com_gigcal (gigcal_gigs_id) 1.0 - SQL Injection

No description provided by source. Joomla Component comgigcalgigcalgigsid SQL-injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. Vulnerability : SQL injection Google Dork : inurl:comgigcal -------------------------------------------------- !...

GLSA-201406-27 : polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201406-27 polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation polkit has a race condition which potentially allows a process to change its UID/EUID via suid or pkexec before authentication is completed. Impact : A loc...

GLSA-201406-29 : spice-gtk: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201406-29 spice-gtk: Privilege escalation spice-gtk does not properly sanitize the DBUSSYSTEMBUSADDRESS environment variable. Impact : A local attacker may be able to gain escalated privileges. Workaround : There is no known...

spice-gtk: Privilege escalation

Background spice-gtk is a set of GObject and Gtk objects for connecting to Spice servers and a client GUI. Description spice-gtk does not properly sanitize the DBUSSYSTEMBUSADDRESS environment variable. Impact A local attacker may be able to gain escalated privileges. Workaround There is no known...

polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation

Background polkit is a toolkit for managing policies relating to unprivileged processes communicating with privileged processes. Description polkit has a race condition which potentially allows a process to change its UID/EUID via suid or pkexec before authentication is completed. Impact A local...

openSUSE Security Update : spice-gtk (openSUSE-SU-2013:1562-1)

spice-gtk received fixes for the acl helper policy kit checks that had a race condition in PID checking. CVE-2013-4324, bnc844967. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libvirt (openSUSE-SU-2014:0593-1)

libvirt was updated to fix various bugs and security issues : CVE-2013-7336: libvirt: unprivileged user can crash libvirtd during spice migration CVE-2013-6456: unsafe usage of paths under /proc/$PID/root Bugfixes for libvirt client killed on reboot shutdown. bnc852005 Also notify systemd when we...

Ubuntu Update for libvirt USN-2209-1

Check for the Version of libvirt OpenVAS Vulnerability Test $Id: gbubuntuUSN22091.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for libvirt USN-2209-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

Ubuntu 13.10 : libvirt vulnerabilities (USN-2209-1)

It was discovered that libvirt incorrectly handled symlinks when using the LXC driver. An attacker could possibly use this issue to delete host devices, create arbitrary nodes, and shutdown or power off the host. CVE-2013-6456 Marian Krcmarik discovered that libvirt incorrectly handled seamless...

USN-2209-1: libvirt vulnerabilities

It was discovered that libvirt incorrectly handled symlinks when using the LXC driver. An attacker could possibly use this issue to delete host devices, create arbitrary nodes, and shutdown or power off the host. CVE-2013-6456 Marian Krcmarik discovered that libvirt incorrectly handled seamless...

DEBIAN-CVE-2013-7336

The qemuMigrationWaitForSpice function in qemu/qemumigration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a denial of service NULL pointer dereference and libvirtd crash by causing domblkstat to be called a...

CVE-2013-7336

The qemuMigrationWaitForSpice function in qemu/qemumigration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a denial of service NULL pointer dereference and libvirtd crash by causing domblkstat to be called a...

Null pointer dereference

The qemuMigrationWaitForSpice function in qemu/qemumigration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a denial of service NULL pointer dereference and libvirtd crash by causing domblkstat to be called a...

CVE-2013-7336

CVE-2013-7336 affects libvirt in qemu migration flow. The qemuMigrationWaitForSpice function in qemu/qemu_migration.c fails to properly enter a monitor during seamless SPICE migration, enabling a local user to trigger a NULL pointer dereference and libvirtd crash by racing with qemuMonitorGetSpic...

UBUNTU-CVE-2013-7336

The qemuMigrationWaitForSpice function in qemu/qemumigration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a denial of service NULL pointer dereference and libvirtd crash by causing domblkstat to be called a...

Important: Red Hat Security Advisory: rhevm-spice-client security update

Updated rhevm-spice-client packages that fix multiple security issues are now available for Red Hat Enterprise Virtualization Manager 3. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give...