Red Hat Security AdvisoryRHSA-2022:5439
RHV-H security update (redhat-virtualization-host) 4.3.23
Released 2022-07-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-virtualization-host-4.3.23-20220622.0.el7_9, redhat-virtualization-host-image-update-4.3.23-20220622.0.el7_9
- Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.3.23-20220622.0.el7_9, redhat-virtualization-host-image-update-4.3.23-20220622.0.el7_9
Fixes 4 records
Priority HIGH 72
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.51733 · Published 2022-03-25 · Fixed in 1.13.4 CWE-787
Priority MEDIUM 49
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.05549 · Published 2022-08-31 · Partial fix CWE-179
Priority MEDIUM 44
Rsyslog is a rocket-fast system for log processing.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.03949 · Published 2022-05-05 · Fixed in 8.2204.1 CWE-120
Priority LOW 39
net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-f…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02914 · Published 2022-06-02 · Fixed CWE-416
THREATIST.IORead the docs