Test Kennung:	1.3.6.1.4.1.25623.1.0.881590
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for xorg-x11-drv-qxl CESA-2013:0218 centos6
Zusammenfassung:	The remote host is missing an update for the 'xorg-x11-drv-qxl'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'xorg-x11-drv-qxl' package(s) announced via the referenced advisory. Vulnerability Insight: The xorg-x11-drv-qxl package provides an X11 video driver for the QEMU QXL video accelerator. This driver makes it possible to use Red Hat Enterprise Linux 6 as a guest operating system under the KVM kernel module and the QEMU multi-platform emulator, using the SPICE protocol. A flaw was found in the way the host's qemu-kvm qxl driver and the guest's X.Org qxl driver interacted when a SPICE connection terminated. A user able to initiate a SPICE connection to a guest could use this flaw to make the guest temporarily unavailable or, potentially (if the sysctl kernel.softlockup_panic variable was set to '1' in the guest), crash the guest. (CVE-2013-0241) All users of xorg-x11-drv-qxl are advised to upgrade to this updated package, which contains a backported patch to correct this issue. All running X.Org server instances using the qxl driver must be restarted for this update to take effect. Affected Software/OS: xorg-x11-drv-qxl on CentOS 6 Solution: Please install the updated packages. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0241 52021 http://secunia.com/advisories/52021 MDVSA-2013:138 http://www.mandriva.com/security/advisories?name=MDVSA-2013:138 RHSA-2013:0218 http://rhn.redhat.com/errata/RHSA-2013-0218.html USN-1714-1 http://www.ubuntu.com/usn/USN-1714-1 [oss-security] 20130130 CVE request -- qxl: synchronous io guest DoS http://www.openwall.com/lists/oss-security/2013/01/30/3 [oss-security] 20130130 Re: CVE request -- qxl: synchronous io guest DoS http://www.openwall.com/lists/oss-security/2013/01/30/4 https://bugzilla.redhat.com/show_bug.cgi?id=906032 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0036 qxl-virtual-spice-dos(81704) https://exchange.xforce.ibmcloud.com/vulnerabilities/81704
Copyright	Copyright (C) 2013 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.