Oval Definition:	oval:org.mitre.oval:def:20911
Revision Date: 2014-02-17 Version: 53 Title: RHSA-2013:0727: kvm security update (Important) Description: The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of service (host OS OOPS) via a crafted application. Family: unix Class: patch Status: ACCEPTED Reference(s): CESA-2013:0727 CVE-2013-1796 CVE-2013-1797 CVE-2013-1798 RHSA-2013:0727-00 Platform(s): CentOS Linux 5 Red Hat Enterprise Linux 5 Product(s): kvm Definition Synopsis Redhat 5 section The operating system installed on the system is Red Hat Enterprise Linux 5 AND Packages section kvm-tools is earlier than 0:83-262.el5_9.3 OR kmod-kvm is earlier than 0:83-262.el5_9.3 OR kmod-kvm-debug is earlier than 0:83-262.el5_9.3 OR kvm-qemu-img is earlier than 0:83-262.el5_9.3 OR kvm is earlier than 0:83-262.el5_9.3 OR Centos 5 section The operating system installed on the system is CentOS Linux 5.x AND Packages section kvm-tools is earlier than 0:83-262.el5.centos.3 OR kmod-kvm is earlier than 0:83-262.el5.centos.3 OR kmod-kvm-debug is earlier than 0:83-262.el5.centos.3 OR kvm-qemu-img is earlier than 0:83-262.el5.centos.3 OR kvm is earlier than 0:83-262.el5.centos.3
BACK