Red Hat Security Advisory

RHSA-2022:7472

virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Released 2022-11-08 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) SLOF-20210217-1.module+el8.7.0+16689+53d59bc2.src::virt-devel:rhel, hivex-1.3.18-23.module+el8.7.0+16689+53d59bc2.i686::virt-devel:rhel, hivex-devel-1.3.18-23.module+el8.7.0+16689+53d59bc2.i686::virt-devel:rhel +47
Red Hat Enterprise Linux AppStream (v. 8) SLOF-20210217-1.module+el8.7.0+16689+53d59bc2.noarch::virt:rhel, SLOF-20210217-1.module+el8.7.0+16689+53d59bc2.src::virt:rhel, hivex-1.3.18-23.module+el8.7.0+16689+53d59bc2.aarch64::virt:rhel +47

TI-2022-02041 CVE-2022-2211 · GHSA-8rvm-f29f-fjx6

LOW 31

A vulnerability was found in libguestfs.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00972 Published 2022-07-12 Partial fix CWE-120

TI-2022-07697 CVE-2022-23645

LOW 28

swtpm is a libtpms-based TPM emulator with socket, character device, and Linux CUSE interface.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00404 Published 2022-02-18 Partial fix · 0.5.3, 0.6.2 CWE-125

TI-2021-02466 CVE-2021-3507 · GHSA-m99h-7jcp-j7w9

LOW 28

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including).

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00489 Published 2021-05-06 Partial fix CWE-119

TI-2022-00801 CVE-2022-0897 · GHSA-4r2g-j5rc-7wqf

LOW 22

A flaw was found in the libvirt nwfilter driver.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01049 Published 2022-03-25 Partial fix CWE-667