Every CVE Search/ Get API key

CVE-2013-4236

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the...

2.7 LowFix available

CVE-2013-4236 is a low vulnerability (CVSS 2.7) in Redhat Enterprise Virtualization, published August 19, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. Fixed in vdsm 0:4.10.2-24.0.el6ev.

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.

Exploit likelihood

0.56%Down 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.7

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.

Record
CVE-2013-4236
CVSS 2.0
2.7 LowAV:A/AC:L/Au:S/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.

Record
CVE-2013-4236
Updated
2026-11-02
EUVDEUVD-2013-4140 No score

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.

Record
EUVD-2013-4140
Updated
2026-11-03
GitHub AdvisoriesGHSA-jhj6-xfqh-j93v No score

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the...

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.

Record
GHSA-jhj6-xfqh-j93v
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
vdsm
Red Hat:enterprise_linux:6::hypervisor
 before 0:4.10.2-24.0.el6ev
0:4.10.2-24.0.el6ev
vdsm-cli
Red Hat:enterprise_linux:6::hypervisor
 before 0:4.10.2-24.0.el6ev
0:4.10.2-24.0.el6ev
vdsm-debuginfo
Red Hat:enterprise_linux:6::hypervisor
 before 0:4.10.2-24.0.el6ev
0:4.10.2-24.0.el6ev
vdsm-hook-vhostmd
Red Hat:enterprise_linux:6::hypervisor
 before 0:4.10.2-24.0.el6ev
0:4.10.2-24.0.el6ev
vdsm-python
Red Hat:enterprise_linux:6::hypervisor
 before 0:4.10.2-24.0.el6ev
0:4.10.2-24.0.el6ev
vdsm-reg
Red Hat:enterprise_linux:6::hypervisor
 before 0:4.10.2-24.0.el6ev
0:4.10.2-24.0.el6ev
vdsm-xmlrpc
Red Hat:enterprise_linux:6::hypervisor
 before 0:4.10.2-24.0.el6ev
0:4.10.2-24.0.el6ev
vdsm
Red Hat:rhev_manager:3
 before 0:4.10.2-24.0.el6ev
0:4.10.2-24.0.el6ev
vdsm-bootstrap
Red Hat:rhev_manager:3
 before 0:4.10.2-24.0.el6ev
0:4.10.2-24.0.el6ev
vdsm-debuginfo
Red Hat:rhev_manager:3
 before 0:4.10.2-24.0.el6ev
0:4.10.2-24.0.el6ev
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
 before 0:6.4-20130815.0.el6_4
0:6.4-20130815.0.el6_4

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 26 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open