CVE-2015-0237: Medium severity red hat enterprise virtualization manager vulnerability
Published May 1, 2015
·Updated
Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated users to cause a denial of service (prevent host start) by creating a long snapshot chain.
Affected Software
1 affected component
redhat Enterprise Virtualization Manager<=3.5.0
Event History
May 1, 2015
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0237?
CVE-2015-0237 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2015-0237?
To fix CVE-2015-0237, upgrade Red Hat Enterprise Virtualization Manager to version 3.5.1 or later.
3
What impact does CVE-2015-0237 have on my system?
CVE-2015-0237 allows remote authenticated users to create a denial of service by creating a long snapshot chain.
4
Is CVE-2015-0237 exploitable remotely?
Yes, CVE-2015-0237 is exploitable remotely by authenticated users.
5
What versions of Red Hat Enterprise Virtualization Manager are affected by CVE-2015-0237?
Versions prior to 3.5.1 of Red Hat Enterprise Virtualization Manager are affected by CVE-2015-0237.