ID de Prueba:	1.3.6.1.4.1.25623.1.0.870898
Categoría:	Red Hat Local Security Checks
Título:	RedHat Update for xorg-x11-drv-qxl RHSA-2013:0218-01
Resumen:	The remote host is missing an update for the 'xorg-x11-drv-qxl'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'xorg-x11-drv-qxl' package(s) announced via the referenced advisory. Vulnerability Insight: The xorg-x11-drv-qxl package provides an X11 video driver for the QEMU QXL video accelerator. This driver makes it possible to use Red Hat Enterprise Linux 6 as a guest operating system under the KVM kernel module and the QEMU multi-platform emulator, using the SPICE protocol. A flaw was found in the way the host's qemu-kvm qxl driver and the guest's X.Org qxl driver interacted when a SPICE connection terminated. A user able to initiate a SPICE connection to a guest could use this flaw to make the guest temporarily unavailable or, potentially (if the sysctl kernel.softlockup_panic variable was set to '1' in the guest), crash the guest. (CVE-2013-0241) All users of xorg-x11-drv-qxl are advised to upgrade to this updated package, which contains a backported patch to correct this issue. All running X.Org server instances using the qxl driver must be restarted for this update to take effect. Affected Software/OS: xorg-x11-drv-qxl on Red Hat Enterprise Linux Desktop (v. 6), Red Hat Enterprise Linux Server (v. 6), Red Hat Enterprise Linux Workstation (v. 6) Solution: Please Install the Updated Packages. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0241 52021 http://secunia.com/advisories/52021 MDVSA-2013:138 http://www.mandriva.com/security/advisories?name=MDVSA-2013:138 RHSA-2013:0218 http://rhn.redhat.com/errata/RHSA-2013-0218.html USN-1714-1 http://www.ubuntu.com/usn/USN-1714-1 [oss-security] 20130130 CVE request -- qxl: synchronous io guest DoS http://www.openwall.com/lists/oss-security/2013/01/30/3 [oss-security] 20130130 Re: CVE request -- qxl: synchronous io guest DoS http://www.openwall.com/lists/oss-security/2013/01/30/4 https://bugzilla.redhat.com/show_bug.cgi?id=906032 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0036 qxl-virtual-spice-dos(81704) https://exchange.xforce.ibmcloud.com/vulnerabilities/81704
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.