CVE-2015-0237

Related Files

Red Hat Security Advisory 2015-0888-01

Posted Apr 28, 2015

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2015-0888-01 - Red Hat Enterprise Virtualization Manager 3.5.1 is now available. It was discovered that the permissions to allow or deny snapshot creation were ignored during live storage migration of a VM's disk between storage domains. An attacker able to live migrate a disk between storage domains could use this flaw to cause a denial of service. It was discovered that a directory shared between the ovirt-engine-dwhd service and a plug-in used during the service's startup had incorrect permissions. A local user could use this flaw to access files in this directory, which could potentially contain sensitive information.

tags | advisory, denial of service, local

systems | linux, redhat

advisories | CVE-2015-0237, CVE-2015-0257

SHA-256 | ca7ceffd1d748a83925a9856f16bb79722cb033187b6a3fc14ffbd62fba7ea48

Download | Favorite | View