Red Hat Security Advisory

RHSA-2021:0988

rhvm-appliance security, bug fix, and enhancement update

Released 2021-03-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Virtualization 4 Hypervisor for RHEL 8 rhvm-appliance-2:4.4-20210310.0.el8ev
Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts rhvm-appliance-2:4.4-20210310.0.el8ev

Fixes 3 records

TI-2015-06661 CVE-2015-8011 · GHSA-9f79-mcm7-48p3

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before…

MEDIUM 50

Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving l…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05473 Published 2020-01-28 Partial fix CWE-120

TI-2020-11220 CVE-2020-14349 · GHSA-2783-h34h-q54q

Uncontrolled search path in PostgreSQL

LOW 36

It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.02235 Published 2020-08-24 Partial fix CWE-427

TI-2020-11221 CVE-2020-14350 · GHSA-6v9v-3f4c-cjgx

Untrusted search path in PostgreSQL

LOW 33

It was found that some PostgreSQL extensions did not use search_path safely in their installation script.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00532 Published 2020-08-24 Partial fix CWE-426