Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2013.0166
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2013-0166)
Zusammenfassung:	The remote host is missing an update for the 'libvirt' package(s) announced via the MGASA-2013-0166 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'libvirt' package(s) announced via the MGASA-2013-0166 advisory. Vulnerability Insight: It was found that libvirtd leaked file descriptors when listing all volumes for a particular pool. A remote attacker able to establish a read-only connection to libvirtd could use this flaw to cause libvirtd to consume all available file descriptors, preventing other users from using libvirtd services (such as starting a new guest) until libvirtd is restarted (CVE-2013-1962). Affected Software/OS: 'libvirt' package(s) on Mageia 3. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1962 1028577 http://www.securitytracker.com/id/1028577 53440 http://secunia.com/advisories/53440 53475 http://secunia.com/advisories/53475 59937 http://www.securityfocus.com/bid/59937 93451 http://osvdb.org/93451 FEDORA-2013-8635 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106906.html FEDORA-2013-8681 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106921.html RHSA-2013:0831 http://rhn.redhat.com/errata/RHSA-2013-0831.html USN-1895-1 http://www.ubuntu.com/usn/USN-1895-1 [libvir-list] 20130516 [libvirt] [PATCH] daemon: fix leak after listing all volumes https://www.redhat.com/archives/libvir-list/2013-May/msg01222.html [oss-security] 20130516 CVE-2013-1962 libvirt: DoS (max count of open files exhaustion) due sockets leak in the storage pool http://www.openwall.com/lists/oss-security/2013/05/16/9 http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=ca697e90d5bd6a6dfb94bfb6d4438bdf9a44b739 https://bugzilla.redhat.com/show_bug.cgi?id=953107 libvirt-cve20131962-dos(84341) https://exchange.xforce.ibmcloud.com/vulnerabilities/84341 openSUSE-SU-2013:0885 http://lists.opensuse.org/opensuse-updates/2013-06/msg00022.html
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.