Red Hat Security AdvisoryRHSA-2018:1524
redhat-virtualization-host bug fix and enhancement update
Released 2018-05-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL 7-based RHEV-H for RHEV 4 (build requirements) imgbased-1.0.16-0.1.el7ev, ovirt-node-ng-4.2.0-0.20170814.0.el7, ovirt-node-ng-nodectl-4.2.0-0.20170814.0.el7 +3
- Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.2-20180508.0.el7_5, redhat-virtualization-host-image-update-4.2-20180508.0.el7_5
Fixes 4 records
Priority HIGH 77
DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client.
CVSS 3.0HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.97862 · Published 2018-05-17 · Fixed CWE-77
Priority MEDIUM 52
A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected beh…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.18485 · Published 2018-05-08 · Partial fix CWE-362
Priority MEDIUM 44
A privilege escalation flaw was found in gluster 3.x snapshot scheduler.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.05487 · Published 2018-04-18 · Fixed CWE-266
Priority LOW 36
kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stac…
CVSS 3.0HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.00743 · Published 2018-05-15 · Partial fix CWE-250
THREATIST.IORead the docs