ID de Prueba:	1.3.6.1.4.1.25623.1.0.67755
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2010:0633
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2010:0633. The Simple Protocol for Independent Computing Environments (SPICE) is a remote display protocol used in Red Hat Enterprise Linux for viewing virtualized guests running on the Kernel-based Virtual Machine (KVM) hypervisor, or on Red Hat Enterprise Virtualization Hypervisor. It was found that the libspice component of QEMU-KVM on the host did not validate all pointers provided from a guest system's QXL graphics card driver. A privileged guest user could use this flaw to cause the host to dereference an invalid pointer, causing the guest to crash (denial of service) or, possibly, resulting in the privileged guest user escalating their privileges on the host. (CVE-2010-0428) It was found that the libspice component of QEMU-KVM on the host could be forced to perform certain memory management operations on memory addresses controlled by a guest. A privileged guest user could use this flaw to crash the guest (denial of service) or, possibly, escalate their privileges on the host. (CVE-2010-0429) All qspice users should upgrade to these updated packages, which contain backported patches to correct these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2010-0633.html http://www.redhat.com/security/updates/classification/#important Risk factor : High CVSS Score: 6.6
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0428 RHSA-2010:0622 https://rhn.redhat.com/errata/RHSA-2010-0622.html RHSA-2010:0633 https://rhn.redhat.com/errata/RHSA-2010-0633.html https://bugzilla.redhat.com/show_bug.cgi?id=568699 Common Vulnerability Exposure (CVE) ID: CVE-2010-0429 https://bugzilla.redhat.com/show_bug.cgi?id=568701
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.