CVE-2013-4236

LOW 2.7CVE-2013-4236 · Published 19/08/2013 · updated 16/06/2026

In short

CVE-2013-4236 is a LOW (CVSS 2.7) vulnerability affecting enterprise virtualization (redhat).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
enterprise virtualization redhat	`= 3.0= 3.2`	No fix yet

Description

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.

References

gerrit.ovirt.org/gitweb
rhn.redhat.com/errata/RHSA-2013-1155.html · Vendor Advisory
bugzilla.redhat.com/show_bug.cgi

More vulnerabilities in enterprise virtualization

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free