CVE-2013-4282

概要

参考情報

• cgit.freedesktop.org/spice/spice/commit · Exploit
• lists.opensuse.org/opensuse-security-announce/2015-05/msg00008.html
• rhn.redhat.com/errata/RHSA-2013-1460.html · Vendor Advisory
• rhn.redhat.com/errata/RHSA-2013-1473.html · Vendor Advisory
• rhn.redhat.com/errata/RHSA-2013-1474.html · Vendor Advisory
• debian.org/security/2014/dsa-2839
• securityfocus.com/bid/63408
• ubuntu.com/usn/USN-2027-1

enterprise virtualization のその他の脆弱性

• CVE-2015-5201高 7.5VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.…
• CVE-2014-8167中 5.9vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack
• CVE-2013-4280中 5.5Insecure temporary file vulnerability in RedHat vsdm 4.9.6.
• CVE-2017-2614中 6.3When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if…
• CVE-2018-1111高 7.5DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager i…