Red Hat Security Advisory: rhev-hypervisor6 security update

Fixed packages 1

Vulnerabilities 3

• Unscored —
  CVE-2013-1860

  Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.…

  linux Debian
  Mar 22, 2013
• Unscored —
  CVE-2014-0055

  The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-43…

  linux Debian
  Mar 26, 2014
• Unscored —
  CVE-2014-0092 EPSS 30%

  lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when veri…

  gnutls28 gnutls26 Debian Ubuntu
  Mar 6, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=921970
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1062577
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1069865
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1075950
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0339.json
• report
  https://access.redhat.com/security/cve/CVE-2013-1860
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-1860
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-1860
• report
  https://access.redhat.com/security/cve/CVE-2014-0055
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0055
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0055
• report
  https://access.redhat.com/security/cve/CVE-2014-0092
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0092
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0092