CVE-2013-0167: Low severity red hat enterprise virtualization vulnerability
A flaw was found in the way processing of unexpected fields in guestInfo dictionary were handled. A privileged guest user can potentially make the host the VM runs on unavailable to the managment server.
Acknowledgements:
This issue was discovered by Dan Kenigsberg of the Red Hat Enterprise Virtualization team.
Other sources
VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via guestInfo dictionaries with "unexpected fields."
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0167?
CVE-2013-0167 is classified as a vulnerability that can potentially disrupt the availability of the host machine for management operations.
How do I fix CVE-2013-0167?
To fix CVE-2013-0167, update to the patched version of Red Hat Enterprise Virtualization 3.0 or 3.2 as provided by Red Hat.
Who is affected by CVE-2013-0167?
Privileged guest users on systems running Red Hat Enterprise Virtualization 3.0 or 3.2 are affected by CVE-2013-0167.
What types of systems are susceptible to CVE-2013-0167?
CVE-2013-0167 affects Red Hat Enterprise Virtualization versions 3.0 and 3.2.
What potential impact does CVE-2013-0167 have on virtualization environments?
CVE-2013-0167 can make the host system running the virtual machine unavailable to the management server.