Read the docs
Red Hat Security Advisory

RHSA-2022:4896

Red Hat Virtualization security, bug fix, and enhancement update [ovirt-4.5.0]

Released 2022-06-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

Priority HIGH 77

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.73188 Published 2022-03-15 Partial fix · 300.0.5, 111.18.0 CWE-835
Priority MEDIUM 49

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05549 Published 2022-08-31 Partial fix CWE-179
TI-2021-02917 CVE-2021-4028 · GHSA-qfcc-9m6r-r23m

Use after free in kernel

Priority LOW 34

A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00318 Published 2022-08-24 Partial fix CWE-416
TI-2021-02966 CVE-2021-4083 · GHSA-rcrv-64p3-px35

Use after free in kernel

Priority LOW 31

A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0031 Published 2022-01-18 Fixed CWE-416