Red Hat Security AdvisoryRHSA-2020:5611
Red Hat Virtualization security, bug fix, and enhancement update
Released 2020-12-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.4.3-20201210.0.el8_3, redhat-virtualization-host-image-update-4.4.3-20201210.0.el8_3
- Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts cockpit-ovirt-0.14.15-1.el8ev, cockpit-ovirt-dashboard-0.14.15-1.el8ev
Fixes 2 records
Priority MEDIUM 50
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving l…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05473 · Published 2020-01-28 · Partial fix CWE-120
Priority MEDIUM 41
Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.05213 · Published 2020-07-15 · Partial fix · 4.17.19, 4.17.20 CWE-770
