Red Hat Security Advisory

RHSA-2022:5678

Red Hat Virtualization security, bug fix, and enhancement update [ovirt-4.5.1]

Released 2022-07-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.5.1-202207170705_8.6, redhat-virtualization-host-image-update-4.5.1-202207170705_8.6

Fixes 2 records

TI-2022-10646 CVE-2022-27666 · GHSA-5h7v-72v6-2r5w

A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c…

MEDIUM 42

A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05524 Published 2022-03-23 Fixed CWE-787

TI-2022-11367 CVE-2022-28733 · GHSA-2rxj-vwp2-v63v

Integer underflow in GNU GRUB

MEDIUM 40

Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01273 Published 2023-07-20 Fixed in 2.06-3 CWE-191