Red Hat Security AdvisoryRHSA-2024:0404
virt:rhel and virt-devel:rhel security update
Released 2024-01-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.8.6) SLOF-20210217-1.module+el8.6.0+14480+c0a3aa0f.src::virt-devel:rhel, hivex-1.3.18-23.module+el8.6.0+14480+c0a3aa0f.i686::virt-devel:rhel, hivex-devel-1.3.18-23.module+el8.6.0+14480+c0a3aa0f.i686::virt-devel:rhel +47
- Red Hat Enterprise Linux AppStream EUS (v.8.6) SLOF-20210217-1.module+el8.6.0+14480+c0a3aa0f.noarch::virt:rhel, SLOF-20210217-1.module+el8.6.0+14480+c0a3aa0f.src::virt:rhel, hivex-1.3.18-23.module+el8.6.0+14480+c0a3aa0f.aarch64::virt:rhel +47
Fixes 4 records
Priority LOW 36
A flaw was found in the QEMU built-in VNC server.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01606 · Published 2023-07-11 · Partial fix CWE-476
Priority LOW 36
A buffer overflow was discovered in NTFS-3G before 2022.10.3.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00381 · Published 2022-11-06 · Partial fix CWE-120
Priority LOW 36
A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00513 · Published 2022-05-02 · Partial fix CWE-416
Priority LOW 29
A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2023-07-24 · Partial fix · 8090020231206155326.a75119d5, 8060020231128234847.ad008a3a +2 CWE-416