Lucene search

K
redhatRedHatRHSA-2024:3253
HistoryMay 22, 2024 - 10:41 a.m.

(RHSA-2024:3253) Moderate: virt:rhel and virt-devel:rhel security update

2024-05-2210:41:20
access.redhat.com
15
rhsa-2024-3253
virtualization
kvm
libvirt
cve-2024-2494
security update

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

17.8%

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

  • libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64perl-sys-guestfs-debuginfo< 1.44.0-9.module+el8.9.0+18724+20190c23perl-Sys-Guestfs-debuginfo-1.44.0-9.module+el8.9.0+18724+20190c23.aarch64.rpm
RedHatanyppc64lenetcf-devel< 0.2.8-12.module+el8.9.0+18724+20190c23netcf-devel-0.2.8-12.module+el8.9.0+18724+20190c23.ppc64le.rpm
RedHatanyppc64lenbdkit-nbd-plugin-debuginfo< 1.24.0-5.module+el8.9.0+18724+20190c23nbdkit-nbd-plugin-debuginfo-1.24.0-5.module+el8.9.0+18724+20190c23.ppc64le.rpm
RedHatanys390xlibvirt-daemon-driver-nodedev-debuginfo< 8.0.0-23.1.module+el8.10.0+21659+98b2ad6alibvirt-daemon-driver-nodedev-debuginfo-8.0.0-23.1.module+el8.10.0+21659+98b2ad6a.s390x.rpm
RedHatanys390xlibvirt-daemon-driver-storage-logical-debuginfo< 8.0.0-23.1.module+el8.10.0+21659+98b2ad6alibvirt-daemon-driver-storage-logical-debuginfo-8.0.0-23.1.module+el8.10.0+21659+98b2ad6a.s390x.rpm
RedHatanyx86_64libguestfs< 1.44.0-9.module+el8.9.0+18724+20190c23libguestfs-1.44.0-9.module+el8.9.0+18724+20190c23.x86_64.rpm
RedHatanyaarch64libguestfs-gfs2< 1.44.0-9.module+el8.9.0+18724+20190c23libguestfs-gfs2-1.44.0-9.module+el8.9.0+18724+20190c23.aarch64.rpm
RedHatanyx86_64nbdkit-linuxdisk-plugin< 1.24.0-5.module+el8.9.0+18724+20190c23nbdkit-linuxdisk-plugin-1.24.0-5.module+el8.9.0+18724+20190c23.x86_64.rpm
RedHatanyx86_64ocaml-libguestfs-debuginfo< 1.44.0-9.module+el8.9.0+18724+20190c23ocaml-libguestfs-debuginfo-1.44.0-9.module+el8.9.0+18724+20190c23.x86_64.rpm
RedHatanyppc64lelibguestfs-java< 1.44.0-9.module+el8.9.0+18724+20190c23libguestfs-java-1.44.0-9.module+el8.9.0+18724+20190c23.ppc64le.rpm
Rows per page:
1-10 of 9151

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

17.8%