Skip to content
OpenAdvisories
Unscored RHSA-2013:0636 5 CVEs

Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

Published Sep 13, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::hypervisor rhev-hypervisor6 0:6.4-20130306.2.el6_4

Vulnerabilities 5

  • Unscored —
    CVE-2012-4929 Public exploit

    The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compre…

    openssl apache2 nginx lighttpd Debian
  • Unscored —
    CVE-2012-6075

    Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versi…

    xen qemu Debian
  • Unscored —
    CVE-2013-0166 EPSS 20%

    OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification fo…

    openssl openssl098 Debian Ubuntu
  • Unscored —
    CVE-2013-0169 Public exploit EPSS 36%

    The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other produc…

    openssl nss bouncycastle gnutls28 Debian Ubuntu
  • Unscored —
    CVE-2013-1619

    The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider…

    gnutls28 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=857051
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=889301
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=907589
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=908052
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=908238
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=913267
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0636.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-4929
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4929
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4929
  • report
    https://access.redhat.com/security/cve/CVE-2012-6075
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-6075
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-6075
  • report
    https://access.redhat.com/security/cve/CVE-2013-0166
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0166
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0166
  • article
    http://www.openssl.org/news/secadv_20130205.txt
  • report
    https://access.redhat.com/security/cve/CVE-2013-0169
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0169
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0169
  • article
    http://www.isg.rhul.ac.uk/tls/
  • article
    https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released
  • report
    https://access.redhat.com/security/cve/CVE-2013-1619
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1619
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1619
  • article
    http://www.gnutls.org/security.html#GNUTLS-SA-2013-1