REDHAT-BUG-996166
First published: Mon Aug 12 2013(Updated: )
It was found that fix for <a href="https://access.redhat.com/security/cve/CVE-2013-0167">CVE-2013-0167</a> was not complete. A privileged guest user could still potentially make the host the guest is running on unavailable to the management server by making guest agent return data with invalid XML characters. Upstream fix: <a href="http://gerrit.ovirt.org/gitweb?p=vdsm.git;a=commit;h=5fe1615b7949999fc9abd896bde63bf24f8431d6">http://gerrit.ovirt.org/gitweb?p=vdsm.git;a=commit;h=5fe1615b7949999fc9abd896bde63bf24f8431d6</a> Acknowledgements: This issue was found by David Gibson of Red Hat.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat oVirt Engine |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-996166?
The severity of REDHAT-BUG-996166 is considered high due to potential impact on host availability.
How do I fix REDHAT-BUG-996166?
To fix REDHAT-BUG-996166, ensure that you apply the latest patch from Red Hat for your oVirt deployment.
Who is affected by REDHAT-BUG-996166?
Any user of Red Hat oVirt that allows privileged guest access may be affected by REDHAT-BUG-996166.
What type of vulnerability is REDHAT-BUG-996166?
REDHAT-BUG-996166 is a vulnerability that allows a privileged guest user to disrupt host availability.
Is there a workaround for REDHAT-BUG-996166?
A temporary workaround for REDHAT-BUG-996166 includes restricting privileged guest access until a patch is applied.
- agent/last-modified-date
- agent/first-publish-date
- agent/type
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2013-4236
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat ovirt engine