CVE

Id
43013  
CVE No.
CVE-2010-0429  
Status
Candidate  
Description
libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are performed, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
469046 43013 CVE-2010-0429 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=568701  View
469047 43013 CVE-2010-0429 REDHAT:RHSA-2010:0622  View
469048 43013 CVE-2010-0429 URL:https://rhn.redhat.com/errata/RHSA-2010-0622.html  View
469049 43013 CVE-2010-0429 REDHAT:RHSA-2010:0633  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35448 JVNDB-2010-001228 OpenSSL の kssl_keytab_is_available 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の ssl/kssl.c の kssl_keytab_is_available 関数には、Kerberos が利用可能で Kerberos の設定ファイルが開けない時、戻り値のチェックに不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-0433 43013 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001228.html  View