Red Hat Security Advisory

RHSA-2019:2889

redhat-virtualization-host security update

Released 2019-09-24 · Red Hat rating Important · View on Red Hat →

Fixed in

RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-virtualization-host-4.3.5-20190920.0.el7_7, redhat-virtualization-host-image-update-4.3.5-20190920.0.el7_7
Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.3.5-20190920.0.el7_7, redhat-virtualization-host-image-update-4.3.5-20190920.0.el7_7

Fixes 1 record

TI-2019-11040 CVE-2019-14835 · GHSA-h3vw-f6h8-86mg

Buffer overflow in Linux kernel

LOW 35

A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00622 Published 2019-09-17 Fixed CWE-120