Test ID:	1.3.6.1.4.1.25623.1.0.67755
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2010:0633
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2010:0633. The Simple Protocol for Independent Computing Environments (SPICE) is a remote display protocol used in Red Hat Enterprise Linux for viewing virtualized guests running on the Kernel-based Virtual Machine (KVM) hypervisor, or on Red Hat Enterprise Virtualization Hypervisor. It was found that the libspice component of QEMU-KVM on the host did not validate all pointers provided from a guest system's QXL graphics card driver. A privileged guest user could use this flaw to cause the host to dereference an invalid pointer, causing the guest to crash (denial of service) or, possibly, resulting in the privileged guest user escalating their privileges on the host. (CVE-2010-0428) It was found that the libspice component of QEMU-KVM on the host could be forced to perform certain memory management operations on memory addresses controlled by a guest. A privileged guest user could use this flaw to crash the guest (denial of service) or, possibly, escalate their privileges on the host. (CVE-2010-0429) All qspice users should upgrade to these updated packages, which contain backported patches to correct these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2010-0633.html http://www.redhat.com/security/updates/classification/#important Risk factor : High CVSS Score: 6.6
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0428 RHSA-2010:0622 https://rhn.redhat.com/errata/RHSA-2010-0622.html RHSA-2010:0633 https://rhn.redhat.com/errata/RHSA-2010-0633.html https://bugzilla.redhat.com/show_bug.cgi?id=568699 Common Vulnerability Exposure (CVE) ID: CVE-2010-0429 https://bugzilla.redhat.com/show_bug.cgi?id=568701
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.