Test ID:	1.3.6.1.4.1.25623.1.0.72481
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2012:1359
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2012:1359. The libvirt library is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. A flaw was found in libvirtd's RPC call handling. An attacker able to establish a read-only connection to libvirtd could use this flaw to crash libvirtd by sending an RPC message that has an event as the RPC number, or an RPC number that falls into a gap in the RPC dispatch table. (CVE-2012-4423) This issue was discovered by Wenlong Huang of the Red Hat Virtualization QE Team. All users of libvirt are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, libvirtd will be restarted automatically. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2012-1359.html Risk factor : Medium
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4423 1027649 http://www.securitytracker.com/id?1027649 55541 http://www.securityfocus.com/bid/55541 FEDORA-2012-15634 http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089976.html FEDORA-2012-15640 http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090121.html RHSA-2012:1359 http://rhn.redhat.com/errata/RHSA-2012-1359.html USN-1708-1 http://www.ubuntu.com/usn/USN-1708-1 [libvirt] 20120912 [PATCH] Fix libvirtd crash possibility https://www.redhat.com/archives/libvir-list/2012-September/msg00843.html [oss-security] 20120913 Re: CVE Request -- libvirt: null function pointer invocation in virNetServerProgramDispatchCall() http://www.openwall.com/lists/oss-security/2012/09/13/14 http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=b7ff9e696063189a715802d081d55a398663c15a http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=f8fbeb50d52520a109d71c8566fed2ea600650ec https://bugzilla.redhat.com/show_bug.cgi?id=857133 openSUSE-SU-2013:0274 http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00001.html
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.