Red Hat Enterprise Virtualization Manager SSL Connection Denial of Service Vulnerability
BID:70315
Info
Red Hat Enterprise Virtualization Manager SSL Connection Denial of Service Vulnerability
| Bugtraq ID: | 70315 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2014-7968 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 08 2014 12:00AM |
| Updated: | Oct 08 2014 12:00AM |
| Credit: | Wade Mealing |
| Vulnerable: |
Redhat Enterprise Virtualization Manager 3.4 |
| Not Vulnerable: |
Redhat Enterprise Virtualization Manager 4.16.6-1 |
Exploit / POC
Red Hat Enterprise Virtualization Manager SSL Connection Denial of Service Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
Solution / Fix
Red Hat Enterprise Virtualization Manager SSL Connection Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Red Hat Enterprise Virtualization Manager SSL Connection Denial of Service Vulnerability
References:
References:
- CVE request for VDSM denial of service (SecLists.Org)
- Bug 1148688 - ssl_accept might block after reboot (Red Hat Bugzilla)
- ssl: ssl_accept blocks after reboot (Ovirt)