huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2011-1171: kernel: ipv4: netfilter: ip_tables: fix infoleak to userspace
Component: kernel
Severity: Low
Public date: 2011-03-10T00:00:00+00:00

net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.

Statement: Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance
life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. Future kernel updates in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 78b79876761b86653df89c48a7010b5cbd41a84a
CVE-2011-1172: kernel: ipv6: netfilter: ip6_tables: fix infoleak to userspace
Component: kernel
Severity: Low
Public date: 2011-03-10T00:00:00+00:00

net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process.

Statement: Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle,
https://access.redhat.com/support/policy/updates/errata/, therefore the fix for
this issue is not currently planned to be included in the future updates. Future kernel updates in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise
MRG may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 6a8ab060779779de8aea92ce3337ca348f973f54
CVE-2011-1178: Gimp: Integer overflow in the PCX image file plug-in
Component: Gimp
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2011-05-23T00:00:00+00:00

Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PCX image that triggers a heap-based buffer overflow.


Affected upstream versions: n/a
Fixed upstream versions: GIMP_2_7_1
Upstream repository: https://git.gnome.org/browse/gimp
Upstream fix commit: a9671395f6573e90316a9d748588c5435216f6ce
CVE-2011-1182: kernel signal spoofing issue
Component: kernel signal spoofing issue
Severity: Low
Public date: 2011-03-23T00:00:00+00:00

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.

Statement: Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates. This was addressed in Red Hat Enterprise Linux 5 and 6 via https://rhn.redhat.com/errata/RHSA-2011-0927.html and https://rhn.redhat.com/errata/RHSA-2011-1189.html. A future kernel update in Red Hat Enterprise MRG may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: da48524eb20662618854bb3df2db01fc65f3070c
CVE-2011-1202: libxslt: Heap address leak in XLST
Component: libxslt
Severity: Low
Public date: 2011-02-22T00:00:00+00:00

The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.

Statement: This issue affects the versions of libxslt package as shipped with Red Hat
Enterprise Linux 4, 5 and 6. The Red Hat Security Response Team has rated this
issue as having low security impact, a future update may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v1.1.27
Upstream repository: https://git.gnome.org/browse/libxslt
Upstream fix commit: ecb6bcb8d1b7e44842edde3929f412d46b40c89f
CVE-2011-1425: xmlsec1: arbitrary file creation when verifying signatures
Component: xmlsec1
Severity: Moderate
Public date: 2011-03-31T00:00:00+00:00

xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification.


Affected upstream versions: n/a
Upstream repository: https://git.gnome.org/browse/xmlsec
Upstream fix commit: 2d5eddcc4163ea050cf3a3a1a25452bb5124f780
CVE-2011-1478: kernel: gro: reset dev and skb_iff on skb reuse
Component: kernel
Severity: Moderate
Public date: 2011-02-02T00:00:00+00:00

The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel before 2.6.38 does not reset the values of certain structure members, which might allow remote attackers to cause a denial of service (NULL pointer dereference) via a malformed VLAN frame.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not support Generic Receive Offload (GRO). It has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0429.html, https://rhn.redhat.com/errata/RHSA-2011-0421.html and https://rhn.redhat.com/errata/RHSA-2011-1253.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.38
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 6d152e23ad1a7a5b40fef1f42e017d66e6115159
CVE-2011-1479: kernel: DoS (crash) due slab corruption in inotify_init1 (incomplete fix for CVE-2010-4250)
Component: kernel
Severity: Moderate
Public date: 2011-04-05T00:00:00+00:00

Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat
Enterprise Linux 4 and 5. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0498.html and https://rhn.redhat.com/errata/RHSA-2011-1253.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: d0de4dc584ec6aa3b26fffea320a8457827768fc
CVE-2011-1486: libvirt: error reporting in libvirtd is not thread safe
Component: libvirt
Severity: Moderate
Public date: 2011-03-23T00:00:00+00:00

libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time.


Affected upstream versions: n/a
Fixed upstream versions: v0.9.0
Upstream repository: https://libvirt.org/git/libvirt.git
Upstream fix commit: f44bfb7fb978c9313ce050a1c4149bf04aa0a670
CVE-2011-1487: perl: lc(), uc() routines are laundering tainted data
Component: perl
Severity: Low
Public date: 2011-03-30T00:00:00+00:00

The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.

Statement: The Red Hat Security Response Team has rated this issue as having low security impact, and it did not affect the versions of perl as shipped with Red Hat Enterprise Linux 4 and 5.  A future update in Red Hat Enterprise Linux 6 may address this flaw.

Affected upstream versions: n/a
Upstream repository: https://perl5.git.perl.org/perl.git
Upstream fix commit: 539689e74a3bcb04d29e4cd9396de91a81045b99
CVE-2011-1573: kernel: sctp: fix to calc the INIT/INIT-ACK chunk length correctly to set
Component: kernel
Severity: Important
Public date: 2010-04-28T00:00:00+00:00

net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk lengths for (1) INIT and (2) INIT ACK chunks, which allows remote attackers to cause a denial of service (OOPS) via crafted packet data.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 4 as it did not support SCTP authentication and extended parameters. It did not affect the version of Linux kernel as shipped with Red Hat Enterprise MRG as it has backported the upstream commit a8170c35 that addressed this. This has been addressed in Red Hat Enterprise Linux 5 and 6 via https://rhn.redhat.com/errata/RHSA-2011-0927.html and https://rhn.redhat.com/errata/RHSA-2011-0498.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.34
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: a8170c35e738d62e9919ce5b109cf4ed66e95bde
CVE-2011-1574: libmodplug: ReadS3M stack overflow vulnerability
Component: libmodplug
Severity: Important
Public date: 2011-04-07T00:00:00+00:00

Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.


Affected upstream versions: n/a
Upstream repository: https://modplug-xmms.git.sourceforge.net/git/modplug-xmms/modplug-xmms
Upstream fix commit: aecef259828a89bb00c2e6f78e89de7363b2237b
CVE-2011-1581: kernel: bonding: Incorrect TX queue offset
Component: kernel
Severity: Important
Public date: 2011-03-14T00:00:00+00:00

The bond_select_queue function in drivers/net/bonding/bond_main.c in the Linux kernel before 2.6.39, when a network device with a large number of receive queues is installed but the default tx_queues setting is used, does not properly restrict queue indexes, which allows remote attackers to cause a denial of service (BUG and system crash) or possibly have unspecified other impact by sending network traffic.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG as they did not backport the upstream commit bb1d9123 that introduced this issue. A future kernel update in Red Hat Enterprise Linux 6 may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: fd0e435b0fe85622f167b84432552885a4856ac8
CVE-2011-1585: kernel: cifs session reuse
Component: kernel
Severity: Low
Public date: 2010-08-02T00:00:00+00:00

The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.

Statement: This issue did not affect the versions of Linux kernel as shipped in Red Hat Enterprise Linux 4, 5, 6, and Red Hat Enterprise MRG as they did not ship mount.cifs with root setuid set. However, as a preventive meaasure, we have addressed this in Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-1386.html and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 4ff67b720c02c36e54d55b88c2931879b7db1cd2
CVE-2011-1593: kernel: proc: signedness issue in next_pidmap()
Component: kernel
Severity: Moderate
Public date: 2011-04-13T00:00:00+00:00

Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a crafted (1) getdents or (2) readdir system call.

Statement: This issue affects the versions of Linux kernel as shipped with Red Hat
Enterprise Linux 4, 5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0927.html, https://rhn.redhat.com/errata/RHSA-2011-1189.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: c78193e9c7bcbf25b8237ad0dec82f805c4ea69b
CVE-2011-1598: kernel: missing check in can/bcm and can/raw socket releases
Component: kernel
Severity: Moderate
Public date: 2011-04-20T00:00:00+00:00

The bcm_release function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: c6914a6f261aca0c9f715f883a353ae7ff51fe83
CVE-2011-1659: glibc: fnmatch() alloca()-based memory corruption flaw
Component: glibc
Severity: Low
Public date: 2010-08-05T00:00:00+00:00

Integer overflow in posix/fnmatch.c in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long UTF8 string that is used in an fnmatch call with a crafted pattern argument, a different vulnerability than CVE-2011-1071.


Affected upstream versions: n/a
Fixed upstream versions: glibc-2.14
Upstream repository: https://sourceware.org/git/glibc.git
Upstream fix commit: 8126d90480fa3e0c5c5cd0d02cb1c93174b45485
CVE-2011-1745: kernel: agp: insufficient pg_start parameter checking in AGPIOC_BIND and AGPIOC_UNBIND ioctls
Component: kernel
Severity: Important
Public date: 2011-04-14T00:00:00+00:00

Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_BIND agp_ioctl ioctl call.

Statement: This issue affects the versions of Linux kernel as shipped with Red Hat
Enterprise 4, 5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0927.html, https://rhn.redhat.com/errata/RHSA-2011-1350.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 194b3da873fd334ef183806db751473512af29ce
CVE-2011-1746: kernel: agp: insufficient page_count parameter checking in agp_allocate_memory()
Component: kernel
Severity: Important
Public date: 2011-04-14T00:00:00+00:00

Multiple integer overflows in the (1) agp_allocate_memory and (2) agp_create_user_memory functions in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allow local users to trigger buffer overflows, and consequently cause a denial of service (system crash) or possibly have unspecified other impact, via vectors related to calls that specify a large number of memory pages.

Statement: This issue affects the versions of Linux kernel as shipped with Red Hat Enterprise 4, 5, 6, and Red Hat Enterprise MRG. This has been addressed in Red Hat Enterprise Linux 5, 6, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0927.html, https://rhn.redhat.com/errata/RHSA-2011-1350.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html. Red Hat Enterprise Linux 4 is now in Production 3 of the maintenance life-cycle, https://access.redhat.com/support/policy/updates/errata/, therefore the fix for this issue is not currently planned to be included in the future updates.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: b522f02184b413955f3bc952e3776ce41edc6355
CVE-2011-1748: kernel: missing check in can/bcm and can/raw socket releases
Component: kernel
Severity: Moderate
Public date: 2011-04-20T00:00:00+00:00

The raw_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.


Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 10022a6c66e199d8f61d9044543f38785713cbbd
CVE-2011-1750: virtio-blk: heap buffer overflow caused by unaligned requests
Component: virtio-blk
Severity: Important
CWE: CWE-805 (Buffer Access with Incorrect Length Value)
Public date: 2011-03-30T00:00:00+00:00

Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.

Statement: This issue does not affect versions of kvm package as shipped with Red Hat
Enterprise Linux 5.

Affected upstream versions: n/a
Upstream repository: https://git.kernel.org/virt/kvm/qemu-kvm.git
Upstream fix commit: 52c050236eaa4f0b5e1d160cd66dc18106445c4d
CVE-2011-1751: qemu: acpi_piix4: missing hotplug check during device removal
Component: qemu
Severity: Important
CWE: CWE-825 (Expired Pointer Dereference)
Public date: 2011-05-18T00:00:00+00:00

The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service (guest crash) and possibly execute arbitrary code by sending a crafted value to the 0xae08 (PCI_EJ_BASE) I/O port, which leads to a use-after-free related to "active qemu timers."

Statement: This issue only affects Red Hat Enterprise Linux 6. The version of the qemu/kvm as shipped with Red Hat Enterprise Linux 5 is not affected.

Affected upstream versions: n/a
Upstream repository: https://git.kernel.org/virt/kvm/qemu-kvm.git
Upstream fix commit: 505597e4476a6bc219d0ec1362b760d71cb4fdca
CVE-2011-1767: kernel: netns vs proto registration ordering
Component: kernel
Severity: Moderate
Public date: 2010-02-16T00:00:00+00:00

net/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip_gre is configured as a module, allows remote attackers to cause a denial of service (OOPS) by sending a packet during module loading.

Statement: The Linux kernel as shipped with Red Hat Enterprise Linux 4, and 5 did not provide support for Network Namespace, and therefore are not affected by this issue. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0928.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.34
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: c2892f02712e9516d72841d5c019ed6916329794
CVE-2011-1768: kernel: netns vs proto registration ordering
Component: kernel
Severity: Moderate
Public date: 2010-02-16T00:00:00+00:00

The tunnels implementation in the Linux kernel before 2.6.34, when tunnel functionality is configured as a module, allows remote attackers to cause a denial of service (OOPS) by sending a packet during module loading.

Statement: The Linux kernel as shipped with Red Hat Enterprise Linux 4, and 5 did not provide support for Network Namespace, and therefore are not affected by this issue. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0928.html, and https://rhn.redhat.com/errata/RHSA-2011-1253.html.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.34
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: d5aa407f59f5b83d2c50ec88f5bf56d40f1f8978
CVE-2011-1769: systemtap: does not guard against DWARF operations div-by-zero errors, which can cause a kernel panic
Component: systemtap
Severity: Moderate
Public date: 2011-05-11T00:00:00+00:00

SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs context variable access.


Affected upstream versions: n/a
Fixed upstream versions: release-1.5
Upstream repository: https://sourceware.org/git/systemtap.git
Upstream fix commit: fa2e3415185a28542d419a641ecd6cddd52e3cd9
CVE-2011-1771: kernel: cifs oops when creating file with O_DIRECT set
Component: kernel
Severity: Moderate
Public date: 2011-04-05T00:00:00+00:00

The cifs_close function in fs/cifs/file.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact by setting the O_DIRECT flag during an attempt to open a file on a CIFS filesystem.

Statement: This issue did not affect the Linux kernel as shipped with Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise Linux MRG as they did not backport the upstream commit cdff08e7 that introduced this issue. Future kernel updates for Red Hat Enterprise Linux 6 may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.39
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7797069305d13252fd66cf722aa8f2cbeb3c95cd
CVE-2011-1773: virt-v2v: vnc password protection is missing after vm conversion
Component: virt-v2v
Severity: Low
Public date: 2010-01-23T00:00:00+00:00

virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/virt-v2v.git
Upstream fix commit: 7e9393129116699d1228bb02b9f65b78584582c1