Red Hat Security Advisory

RHSA-2022:0540

Red Hat Virtualization Host security update [ovirt-4.4.10-1]

Released 2022-02-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.4.10-202202081536_8.5, redhat-virtualization-host-image-update-4.4.10-202202081536_8.5

Fixes 4 records

TI-2022-00125 CVE-2022-0185

Integer overflow in kernel

CRITICAL 96KEV

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.25151 Published 2022-02-11 Fixed CWE-190

TI-2021-02923 CVE-2021-4034 · GHSA-qgr2-xgqv-24x8

Out-of-bounds write in polkit

CRITICAL 93KEV

A local privilege escalation vulnerability was found on polkit's pkexec utility.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.94921 Published 2022-01-28 Fixed CWE-787

TI-2021-20518 CVE-2021-45417 · GHSA-gfm2-8gq5-m3x8

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata…

LOW 35

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00493 Published 2022-01-20 Fixed CWE-787

TI-2021-03026 CVE-2021-4155

A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed…

LOW 25

A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00302 Published 2022-08-24 Fixed CWE-131