CVE-2013-4236: Red Hat Enterprise Virtualization

Low severity, CVSS 2.7. EPSS: 0.6% chance of exploitation in the next 30 days.

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.

Affected products

• Red Hat Enterprise Virtualization: version 3.0 only; version 3.2 only

Published 2013-08-19. Last modified 2026-06-16.