Red Hat Security AdvisoryRHSA-2021:4191
virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.src::virt-devel:rhel, hivex-1.3.18-21.module+el8.5.0+10709+b3edb581.i686::virt-devel:rhel, hivex-devel-1.3.18-21.module+el8.5.0+10709+b3edb581.i686::virt-devel:rhel +47
- Red Hat Enterprise Linux AppStream (v. 8) SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.noarch::virt:rhel, SLOF-20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418.src::virt:rhel, hivex-1.3.18-21.module+el8.5.0+10709+b3edb581.aarch64::virt:rhel +47
Fixes 7 records
Priority LOW 32
An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01366 · Published 2022-03-02 · Partial fix CWE-667
Priority LOW 31
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels.
CVSS 3.1MEDIUM 6.3· Local · Low privileges · No interaction · EPSS 0.00493 · Published 2022-03-02 · Partial fix CWE-732
Priority LOW 18
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU.
CVSS 3.1LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00326 · Published 2021-06-15 · Partial fix CWE-824
Priority LOW 18
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU.
CVSS 3.1LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00326 · Published 2021-06-15 · Partial fix CWE-824
Priority LOW 18
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU.
CVSS 3.1LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00326 · Published 2021-06-15 · Partial fix CWE-824
Priority LOW 18
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU.
CVSS 3.1LOW 3.8· Local · Low privileges · No interaction · EPSS 0.00326 · Published 2021-06-15 · Partial fix CWE-824
Priority LOW 16
QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.0044 · Published 2020-07-21 · Partial fix CWE-416