TI-2024-06865 CVE-2024-7409 · GHSA-7c7g-wccp-rrhj
Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
Priority MEDIUM 41
A flaw was found in the QEMU NBD Server.
RHSA-2024:6964
virt:rhel and virt-devel:rhel security update
Released 2024-09-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) SLOF-20210217-2.module+el8.10.0+20141+6faa2812.noarch::virt:rhel, SLOF-20210217-2.module+el8.10.0+20141+6faa2812.src::virt:rhel, hivex-1.3.18-23.module+el8.9.0+18724+20190c23.aarch64::virt:rhel +47
- Red Hat Enterprise Linux CRB (v. 8) SLOF-20210217-2.module+el8.10.0+20141+6faa2812.src::virt-devel:rhel, hivex-1.3.18-23.module+el8.9.0+18724+20190c23.i686::virt-devel:rhel, hivex-devel-1.3.18-23.module+el8.9.0+18724+20190c23.i686::virt-devel:rhel +47
Fixes 3 records
TI-2024-03216 CVE-2024-3446 · GHSA-rgvf-j3x5-6277
Qemu: virtio: dma reentrancy issue leads to double free vulnerability
Priority LOW 37
A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues.
TI-2024-06843 CVE-2024-7383 · GHSA-rqmr-f8r9-69wq
Libnbd: nbd server improper certificate validation
Priority LOW 35
A flaw was found in libnbd.