Professional OVAL Repository

[Eng] [Rus] [Sign-In]

oval:org.mitre.oval:def:21243

Version

Class

patch

ALTXid

37287

Language

English

Severity

NotAvailable

Title

RHSA-2013:0831: libvirt security and bug fix update (Moderate)

Description

The remoteDispatchStoragePoolListAllVolumes function in the storage pool manager in libvirt 1.0.5 allows remote attackers to cause a denial of service (file descriptor consumption) via a large number of requests "to list all volumes for the particular pool."

Family

unix

Platform

Product

libvirt

OVAL Repository

Status: ACCEPTED
Status: ACCEPTED
- 2014-01-09T13:03:25 : submitted
  - ALTX-SOFT Sergey Artykhov
- 2014-01-10T12:58:36.293-05:00 : status_change DRAFT
- 2014-01-27T04:01:23.495-05:00 : status_change INTERIM
- 2014-02-17T04:01:36.839-05:00 : status_change ACCEPTED

Reference

VENDOR: RHSA-2013:0831-01

CESA: CESA-2013:0831
CESA: CESA-2013:0831

Id: CESA-2013:0831

CVE: CVE-2013-1962

Criteria

Expand All

Collapse All

AND

OR	Redhat 6 or Centos 6 release

EXTENDED DEFINITION (ID = oval:org.mitre.oval:def:20273) The operating system installed on the system is Red Hat Enterprise Linux 6

EXTENDED DEFINITION (ID = oval:org.mitre.oval:def:16337) The operating system installed on the system is CentOS Linux 6.x

OR	Packages section

CRITERION libvirt-devel is earlier than 0:0.10.2-18.el6_4.5
- RPMINFO_TEST (ID = oval:org.mitre.oval:tst:91206) check=at least one, check_existence=at_least_one_exists, comment=libvirt-devel is earlier than 0:0.10.2-18.el6_4.5, version=2
  - rpminfo_object (ID = oval:org.mitre.oval:obj:14880)
    name libvirt-devel
  - rpminfo_state (ID = oval:org.mitre.oval:ste:26037)
    evr datatype=evr_string | operation=less than | value=0:0.10.2-18.el6_4.5
CRITERION libvirt-client is earlier than 0:0.10.2-18.el6_4.5
- RPMINFO_TEST (ID = oval:org.mitre.oval:tst:90509) check=at least one, check_existence=at_least_one_exists, comment=libvirt-client is earlier than 0:0.10.2-18.el6_4.5, version=2
  - rpminfo_object (ID = oval:org.mitre.oval:obj:29031)
    name libvirt-client
  - rpminfo_state (ID = oval:org.mitre.oval:ste:26037)
    evr datatype=evr_string | operation=less than | value=0:0.10.2-18.el6_4.5
CRITERION libvirt-python is earlier than 0:0.10.2-18.el6_4.5
- RPMINFO_TEST (ID = oval:org.mitre.oval:tst:90308) check=at least one, check_existence=at_least_one_exists, comment=libvirt-python is earlier than 0:0.10.2-18.el6_4.5, version=2
  - rpminfo_object (ID = oval:org.mitre.oval:obj:15191)
    name libvirt-python
  - rpminfo_state (ID = oval:org.mitre.oval:ste:26037)
    evr datatype=evr_string | operation=less than | value=0:0.10.2-18.el6_4.5

CRITERION

libvirt-lock-sanlock is earlier than 0:0.10.2-18.el6_4.5

RPMINFO_TEST (ID = oval:org.mitre.oval:tst:90865) check=at least one, check_existence=at_least_one_exists, comment=libvirt-lock-sanlock is earlier than 0:0.10.2-18.el6_4.5, version=2

rpminfo_object (ID = oval:org.mitre.oval:obj:28971)
name libvirt-lock-sanlock
rpminfo_state (ID = oval:org.mitre.oval:ste:26037)
evr datatype=evr_string | operation=less than | value=0:0.10.2-18.el6_4.5

CRITERION libvirt is earlier than 0:0.10.2-18.el6_4.5
- RPMINFO_TEST (ID = oval:org.mitre.oval:tst:91231) check=at least one, check_existence=at_least_one_exists, comment=libvirt is earlier than 0:0.10.2-18.el6_4.5, version=2
  - rpminfo_object (ID = oval:org.mitre.oval:obj:15209)
    name libvirt
  - rpminfo_state (ID = oval:org.mitre.oval:ste:26037)
    evr datatype=evr_string | operation=less than | value=0:0.10.2-18.el6_4.5


	2008-2021, © AO ALTEX-SOFT , ovaldb@altx-soft.com OVAL and the OVAL logo are registered trademarks of The MITRE Corporation. Other names may be trademarks of their respective owners.

Access vector:	PARTIAL
Access complexity:	LOW
Authentication:	NONE
Confidentiality impact:	NONE
Integrity impact:	NONE
Availability impact:	PARTIAL