Red Hat Security Advisory

RHSA-2023:5264

virt:rhel and virt-devel:rhel security and bug fix update

Released 2023-09-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) SLOF-20210217-1.module+el8.8.0+16781+9f4724c2.noarch::virt:rhel, SLOF-20210217-1.module+el8.8.0+16781+9f4724c2.src::virt:rhel, hivex-1.3.18-23.module+el8.8.0+16781+9f4724c2.aarch64::virt:rhel +47
Red Hat Enterprise Linux CRB (v. 8) SLOF-20210217-1.module+el8.8.0+16781+9f4724c2.src::virt-devel:rhel, hivex-1.3.18-23.module+el8.8.0+16781+9f4724c2.i686::virt-devel:rhel, hivex-devel-1.3.18-23.module+el8.8.0+16781+9f4724c2.i686::virt-devel:rhel +47

TI-2023-03137 CVE-2023-3354 · GHSA-vhf9-5f69-9hjm

LOW 36

A flaw was found in the QEMU built-in VNC server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01606 Published 2023-07-11 Partial fix CWE-476

TI-2022-19124 CVE-2022-40284

LOW 36

A buffer overflow was discovered in NTFS-3G before 2022.10.3.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00381 Published 2022-11-06 Partial fix CWE-120