Red Hat Security AdvisoryRHSA-2021:0395
RHV-H security, bug fix, enhancement update (redhat-virtualization-host) 4.3.13
Released 2021-02-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-virtualization-host-4.3.13-20210127.0.el7_9, redhat-virtualization-host-image-update-4.3.13-20210127.0.el7_9
- Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.3.13-20210127.0.el7_9, redhat-virtualization-host-image-update-4.3.13-20210127.0.el7_9
Fixes 4 records
Priority CRITICAL 93KEV
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.99962 · Published 2021-01-26 · Fixed CWE-193
Priority LOW 26
A flaw was found in dnsmasq before version 2.83.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.05466 · Published 2021-01-20 · Partial fix CWE-358
Priority LOW 25
A flaw was found in dnsmasq before version 2.83.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.0416 · Published 2021-01-20 · Partial fix CWE-358
Priority LOW 22
A flaw was found in dnsmasq before version 2.83.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.02227 · Published 2021-01-20 · Partial fix CWE-326
