Detections
Analytics
Scientific Linux Security Update : hypervkvpd on SL5.x i386/x86_64 (20130509)
medium Nessus Plugin ID 66371
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
A denial of service flaw was found in the way hypervkvpd processed certain Netlink messages. A local, unprivileged user in a guest (running on Microsoft Hyper-V) could send a Netlink message that, when processed, would cause the guest's hypervkvpd daemon to exit.(CVE-2012-5532)
This update also fixes the following bug :
- The hypervkvpd daemon did not close the file descriptors for pool files when they were updated. This could eventually lead to hypervkvpd crashing with a 'KVP:
Failed to open file, pool: 1' error after consuming all available file descriptors. With this update, the file descriptors are closed, correcting this issue.
After installing the update, it is recommended to reboot all guest machines.
Solution
Update the affected hypervkvpd and / or hypervkvpd-debuginfo packages.See Also
Plugin Details
Severity: Medium
ID: 66371
File Name: sl_20130509_hypervkvpd_on_SL5_x.nasl
Version: 1.5
Type: local
Agent: unix
Published: 5/10/2013
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 4.9
Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: p-cpe:/a:fermilab:scientific_linux:hypervkvpd, p-cpe:/a:fermilab:scientific_linux:hypervkvpd-debuginfo, x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Patch Publication Date: 5/9/2013
Vulnerability Publication Date: 12/27/2012
Reference Information
CVE: CVE-2012-5532