Red Hat Security Advisory: rhev-hypervisor6 security update

Fixed packages 1

Vulnerabilities 4

• Unscored —
  CVE-2014-3466 Public exploit EPSS 11%

  Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.1…

  gnutls28 gnutls28 gnutls26 Debian Ubuntu
  Jun 3, 2014
• Unscored —
  CVE-2014-3467

  Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote att…

  libtasn1-6 libtasn1-6 Debian Ubuntu
  Jun 5, 2014
• Unscored —
  CVE-2014-3468

  The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length i…

  libtasn1-6 libtasn1-6 Debian Ubuntu
  Jun 5, 2014
• Unscored —
  CVE-2014-3469

  The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent atta…

  libtasn1-6 libtasn1-6 Debian Ubuntu
  Jun 5, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1101932
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1102022
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1102323
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1102329
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1107789
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0815.json
• report
  https://access.redhat.com/security/cve/CVE-2014-3466
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3466
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3466
• report
  https://access.redhat.com/security/cve/CVE-2014-3467
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3467
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3467
• report
  https://access.redhat.com/security/cve/CVE-2014-3468
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3468
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3468
• report
  https://access.redhat.com/security/cve/CVE-2014-3469
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3469
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3469