First published: Wed Jan 09 2013(Updated: )
A flaw was found in the way processing of unexpected fields in guestInfo dictionary were handled. A privileged guest user can potentially make the host the VM runs on unavailable to the managment server. Acknowledgements: This issue was discovered by Dan Kenigsberg of the Red Hat Enterprise Virtualization team.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat Enterprise Virtualization | =3.0 | |
Red Hat Enterprise Virtualization | =3.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-0167 is classified as a vulnerability that can potentially disrupt the availability of the host machine for management operations.
To fix CVE-2013-0167, update to the patched version of Red Hat Enterprise Virtualization 3.0 or 3.2 as provided by Red Hat.
Privileged guest users on systems running Red Hat Enterprise Virtualization 3.0 or 3.2 are affected by CVE-2013-0167.
CVE-2013-0167 affects Red Hat Enterprise Virtualization versions 3.0 and 3.2.
CVE-2013-0167 can make the host system running the virtual machine unavailable to the management server.