CVEvulnerability
CVE-2013-4236
2.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-08-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.7 LOW — AV:A/AC:L/Au:S/C:N/I:N/A:P
Description
VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.
Affected configurations
• redhat enterprise virtualization 3.0
• redhat enterprise virtualization 3.2
References
- http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6 gerrit.ovirt.org
- http://rhn.redhat.com/errata/RHSA-2013-1155.html Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=996166 bugzilla.redhat.com
- http://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=5fe1615b7949999fc9abd896bde63bf24f8431d6 gerrit.ovirt.org
- http://rhn.redhat.com/errata/RHSA-2013-1155.html Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=996166 bugzilla.redhat.com