Read the docs
Red Hat Security Advisory

RHSA-2021:3235

Red Hat Virtualization Host security and bug fix update [ovirt-4.4.7]

Released 2021-08-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

TI-2021-02567 CVE-2021-3621 · GHSA-g527-g4q2-57xc

Command injection in sssd

Priority MEDIUM 43

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02648 Published 2021-12-23 Partial fix CWE-77
Priority LOW 39

An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest.

CVSS 4.0HIGH 8.7 Local Low privileges No interaction EPSS 0.0066 Published 2021-05-26 Partial fix CWE-119
TI-2021-02555 CVE-2021-3609 · GHSA-rv9w-mxpp-hwhj

Race condition in kernel

Priority LOW 31

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00431 Published 2022-03-03 Partial fix CWE-362