oval:org.mitre.oval:def:27115

Definition Id: oval:org.mitre.oval:def:27115

Oval ID:	oval:org.mitre.oval:def:27115
Title:	RHSA-2014:1352: libvirt security and bug fix update (Moderate)
Description:	The libvirt library is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. An out-of-bounds read flaw was found in the way libvirt's qemuDomainGetBlockIoTune() function looked up the disk index in a non-persistent (live) disk configuration while a persistent disk configuration was being indexed. A remote attacker able to establish a read-only connection to libvirtd could use this flaw to crash libvirtd or, potentially, leak memory from the libvirtd process. (CVE-2014-3633) A denial of service flaw was found in the way libvirt's virConnectListAllDomains() function computed the number of used domains. A remote attacker able to establish a read-only connection to libvirtd could use this flaw to make any domain operations within libvirt unresponsive. (CVE-2014-3657) The CVE-2014-3633 issue was discovered by Luyao Huang of Red Hat. This update also fixes the following bug: * Prior to this update, libvirt was setting the cpuset.mems parameter for domains with numatune/memory[nodeset] prior to starting them. As a consequence, domains with such a nodeset, which excluded the NUMA node with DMA and DMA32 zones (found in /proc/zoneinfo), could not be started due to failed KVM initialization. With this update, libvirt sets the cpuset.mems parameter after the initialization, and domains with any nodeset (in /numatune/memory) can be started without an error. (BZ#1135871) All libvirt users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, libvirtd will be restarted automatically.
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:1352-00 CESA-2014:1352 CVE-2014-3633 CVE-2014-3657	Version:	3
Platform(s):	Red Hat Enterprise Linux 7 CentOS Linux 7	Product(s):	libvirt
Definition Synopsis:
Redhat 7 or Centos 7 release The operating system installed on the system is Red Hat Enterprise Linux 7 AND The operating system installed on the system is CentOS Linux 7.x Packages section libvirt is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-client is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon-config-network is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon-config-nwfilter is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon-driver-interface is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon-driver-lxc is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon-driver-network is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon-driver-nodedev is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon-driver-nwfilter is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon-driver-qemu is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon-driver-secret is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon-driver-storage is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon-kvm is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-daemon-lxc is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-devel is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-docs is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-lock-sanlock is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-login-shell is earlier than 0:1.1.1-29.el7_0.3 AND libvirt-python is earlier than 0:1.1.1-29.el7_0.3

Definition Id: oval:org.mitre.oval:def:24773

Oval ID:	oval:org.mitre.oval:def:24773
Title:	The operating system installed on the system is CentOS Linux 7.x
Description:	The operating system installed on the system is CentOS Linux 7.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:7	Version:	3
Platform(s):	CentOS Linux 7	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 7.x is installed
Referenced By:
oval:org.mitre.oval:def:27115

Definition Id: oval:org.mitre.oval:def:24953

Oval ID:	oval:org.mitre.oval:def:24953
Title:	The operating system installed on the system is Red Hat Enterprise Linux 7
Description:	The operating system installed on the system is Red Hat Enterprise Linux 7.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:7	Version:	3
Platform(s):	Red Hat Enterprise Linux 7	Product(s):
Definition Synopsis:
Red Hat Enterprise 7 is installed AND NOT Oracle Linux 7.x is installed
Referenced By:
oval:org.mitre.oval:def:27115

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0273s

Facebook rss twitter linkedin mail