Bug 237347 (CVE-2007-2893)
Summary: | CVE-2007-2893 xen NE2000 RX Frame Heap Overflow | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Marcel Holtmann <holtmann> |
Component: | vulnerability | Assignee: | Don Dutile (Red Hat) <ddutile> |
Status: | CLOSED NOTABUG | QA Contact: | |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | unspecified | CC: | kreilly, security-response-team, xen-maint |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2007-11-02 09:42:08 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 237470 | ||
Bug Blocks: |
Description
Marcel Holtmann
2007-04-20 21:52:54 UTC
This request was evaluated by Red Hat Product Management for inclusion in a Red Hat Enterprise Linux maintenance release. Product Management has requested further review of this request by Red Hat Engineering, for potential inclusion in a Red Hat Enterprise Linux Update release for currently deployed products. This request is not yet committed for inclusion in an Update release. Public via http://taviso.decsystem.org/virtsec.pdf note that NE2000 is not enabled by default, see http://lists.xensource.com/archives/html/xen-devel/2007-05/msg00021.html Not vulnerable. This issue did not affect Xen as shipped with Red Hat Enterprise Linux 5. |