Test ID:	1.3.6.1.4.1.25623.1.0.841804
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2209-1)
Summary:	The remote host is missing an update for the 'libvirt' package(s) announced via the USN-2209-1 advisory.
Description:	Summary: The remote host is missing an update for the 'libvirt' package(s) announced via the USN-2209-1 advisory. Vulnerability Insight: It was discovered that libvirt incorrectly handled symlinks when using the LXC driver. An attacker could possibly use this issue to delete host devices, create arbitrary nodes, and shutdown or power off the host. (CVE-2013-6456) Marian Krcmarik discovered that libvirt incorrectly handled seamless SPICE migrations. An attacker could possibly use this issue to cause a denial of service. (CVE-2013-7336) Affected Software/OS: 'libvirt' package(s) on Ubuntu 13.10. Solution: Please install the updated package(s). CVSS Score: 5.8 CVSS Vector: AV:A/AC:M/Au:S/C:N/I:P/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6456 56187 http://secunia.com/advisories/56187 56215 http://secunia.com/advisories/56215 60895 http://secunia.com/advisories/60895 65743 http://www.securityfocus.com/bid/65743 FEDORA-2014-2864 http://lists.fedoraproject.org/pipermail/package-announce/2014-February/129199.html GLSA-201412-04 http://security.gentoo.org/glsa/glsa-201412-04.xml http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=5fc590ad9f4 http://libvirt.org/news.html http://security.libvirt.org/2013/0018.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732394 https://bugzilla.redhat.com/show_bug.cgi?id=1045643 openSUSE-SU-2014:0593 http://lists.opensuse.org/opensuse-updates/2014-05/msg00004.html Common Vulnerability Exposure (CVE) ID: CVE-2013-7336 http://www.openwall.com/lists/oss-security/2014/03/18/1 http://www.openwall.com/lists/oss-security/2014/03/18/3 SuSE Security Announcement: openSUSE-SU-2014:0593 (Google Search)
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.