ID de Prueba:	1.3.6.1.4.1.25623.1.0.881590
Categoría:	CentOS Local Security Checks
Título:	CentOS Update for xorg-x11-drv-qxl CESA-2013:0218 centos6
Resumen:	The remote host is missing an update for the 'xorg-x11-drv-qxl'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'xorg-x11-drv-qxl' package(s) announced via the referenced advisory. Vulnerability Insight: The xorg-x11-drv-qxl package provides an X11 video driver for the QEMU QXL video accelerator. This driver makes it possible to use Red Hat Enterprise Linux 6 as a guest operating system under the KVM kernel module and the QEMU multi-platform emulator, using the SPICE protocol. A flaw was found in the way the host's qemu-kvm qxl driver and the guest's X.Org qxl driver interacted when a SPICE connection terminated. A user able to initiate a SPICE connection to a guest could use this flaw to make the guest temporarily unavailable or, potentially (if the sysctl kernel.softlockup_panic variable was set to '1' in the guest), crash the guest. (CVE-2013-0241) All users of xorg-x11-drv-qxl are advised to upgrade to this updated package, which contains a backported patch to correct this issue. All running X.Org server instances using the qxl driver must be restarted for this update to take effect. Affected Software/OS: xorg-x11-drv-qxl on CentOS 6 Solution: Please install the updated packages. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0241 http://www.mandriva.com/security/advisories?name=MDVSA-2013:138 http://www.openwall.com/lists/oss-security/2013/01/30/3 http://www.openwall.com/lists/oss-security/2013/01/30/4 RedHat Security Advisories: RHSA-2013:0218 http://rhn.redhat.com/errata/RHSA-2013-0218.html http://secunia.com/advisories/52021 http://www.ubuntu.com/usn/USN-1714-1 XForce ISS Database: qxl-virtual-spice-dos(81704) https://exchange.xforce.ibmcloud.com/vulnerabilities/81704
Copyright	Copyright (c) 2013 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.