Test ID:	1.3.6.1.4.1.25623.1.0.850395
Category:	SuSE Local Security Checks
Title:	openSUSE: Security Advisory for libvirt (openSUSE-SU-2013:0274-1)
Summary:	The remote host is missing an update for the 'libvirt'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'libvirt' package(s) announced via the referenced advisory. Vulnerability Insight: libvirt was updated to fix some bugs and security issues: Security issues fixed: - Fix crash on error paths of message dispatching, CVE-2013-0170 bnc#800976 - security: Fix libvirtd crash possibility CVE-2012-4423 bnc#780432 Also bugs were fixed: - qemu: Fix probing for guest capabilities bnc#772586 - xen-xm: Generate UUID if not specified bnc#773626 - xenParseXM: don't dereference NULL pointer when script is empty bnc#773621 Affected Software/OS: libvirt on openSUSE 12.1 Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4423 1027649 http://www.securitytracker.com/id?1027649 55541 http://www.securityfocus.com/bid/55541 FEDORA-2012-15634 http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089976.html FEDORA-2012-15640 http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090121.html RHSA-2012:1359 http://rhn.redhat.com/errata/RHSA-2012-1359.html USN-1708-1 http://www.ubuntu.com/usn/USN-1708-1 [libvirt] 20120912 [PATCH] Fix libvirtd crash possibility https://www.redhat.com/archives/libvir-list/2012-September/msg00843.html [oss-security] 20120913 Re: CVE Request -- libvirt: null function pointer invocation in virNetServerProgramDispatchCall() http://www.openwall.com/lists/oss-security/2012/09/13/14 http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=b7ff9e696063189a715802d081d55a398663c15a http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=f8fbeb50d52520a109d71c8566fed2ea600650ec https://bugzilla.redhat.com/show_bug.cgi?id=857133 openSUSE-SU-2013:0274 http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00001.html Common Vulnerability Exposure (CVE) ID: CVE-2013-0170 1028047 http://www.securitytracker.com/id/1028047 52001 http://secunia.com/advisories/52001 52003 http://secunia.com/advisories/52003 57578 http://www.securityfocus.com/bid/57578 89644 http://osvdb.org/89644 FEDORA-2013-1626 http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098398.html FEDORA-2013-1642 http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098370.html FEDORA-2013-1644 http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098326.html RHSA-2013:0199 http://rhn.redhat.com/errata/RHSA-2013-0199.html SUSE-SU-2013:0320 http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00016.html http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=46532e3e8ed5f5a736a02f67d6c805492f9ca720 http://libvirt.org/news.html http://wiki.libvirt.org/page/Maintenance_Releases https://bugzilla.redhat.com/show_bug.cgi?id=893450 libvirt-virnetmessagefree-code-exec(81552) https://exchange.xforce.ibmcloud.com/vulnerabilities/81552 openSUSE-SU-2013:0275 http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00002.html
Copyright	Copyright (C) 2013 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.