Skip to content
OpenAdvisories
Unscored RHSA-2015:0126 6 CVEs

Red Hat Security Advisory: rhev-hypervisor6 security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::hypervisor rhev-hypervisor6 0:6.6-20150123.1.el6ev

Vulnerabilities 6

  • Unscored —
    CVE-2014-3511 EPSS 14%

    The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to …

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3567 EPSS 23%

    Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 be…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3611

    Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-3645

    arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT in…

    linux Debian
  • Unscored —
    CVE-2014-3646

    arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPI…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2015-0235 Public exploit EPSS 95%

    Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,…

    glibc Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1127504
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1144825
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1144835
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1144878
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152563
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152961
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1180044
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183461
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1185720
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0126.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3511
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3511
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3511
  • article
    https://www.openssl.org/news/secadv_20140806.txt
  • report
    https://access.redhat.com/security/cve/CVE-2014-3567
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3567
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3567
  • article
    https://www.openssl.org/news/secadv_20141015.txt
  • report
    https://access.redhat.com/security/cve/CVE-2014-3611
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3611
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3611
  • report
    https://access.redhat.com/security/cve/CVE-2014-3645
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3645
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3645
  • report
    https://access.redhat.com/security/cve/CVE-2014-3646
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3646
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3646
  • report
    https://access.redhat.com/security/cve/CVE-2015-0235
  • article
    https://access.redhat.com/security/vulnerabilities/ghost
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0235
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0235
  • article
    http://www.openwall.com/lists/oss-security/2015/01/27/9
  • article
    https://access.redhat.com/articles/1332213
  • article
    https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability