CVE-2013-4236: redhat enterprise_virtualization
Vulnerability summary
CVE-2013-4236 is a low (CVSS 2.7) vulnerability in redhat enterprise_virtualization. EPSS estimates a 0.56% chance of exploitation in the next 30 days, higher than 46.5% of scored vulnerabilities.
Not severe (CVSS 2.7, adjacent network); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1Timeline
- 19-08-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.56%
Chance of exploitation in the next 30 days
Percentile
47%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.56% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: adjacent network, authentication (CVSS vector). Other conditions: not stated in public data.
Redhat9 products
- enterprise_virtualization3.0 | 3.2
- vdsm< 0:4.10.2-24.0.el6ev
- vdsm-bootstrap< 0:4.10.2-24.0.el6ev
- vdsm-cli< 0:4.10.2-24.0.el6ev
- vdsm-debuginfo< 0:4.10.2-24.0.el6ev
1 vendor · 9 products
