Lucene search

K
redhatRedHatRHSA-2024:4420
HistoryJul 09, 2024 - 9:48 a.m.

(RHSA-2024:4420) Important: virt:rhel and virt-devel:rhel security update

2024-07-0909:48:22
access.redhat.com
kvm
virt:rhel
virt-devel:rhel
qemu
security update

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for
Linux on numerous hardware platforms. The virt:rhel module contains packages
which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

  • qemu-kvm: QEMU: ‘qemu-img info’ leads to host file read/write (CVE-2024-4467)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64perl-sys-guestfs-debuginfo< 1.44.0-9.module+el8.9.0+18724+20190c23perl-Sys-Guestfs-debuginfo-1.44.0-9.module+el8.9.0+18724+20190c23.aarch64.rpm
RedHatanyaarch64libvirt-daemon-driver-storage-scsi< 8.0.0-23.2.module+el8.10.0+21972+d7867348libvirt-daemon-driver-storage-scsi-8.0.0-23.2.module+el8.10.0+21972+d7867348.aarch64.rpm
RedHatanyppc64lenetcf-devel< 0.2.8-12.module+el8.9.0+18724+20190c23netcf-devel-0.2.8-12.module+el8.9.0+18724+20190c23.ppc64le.rpm
RedHatanyppc64lenbdkit-nbd-plugin-debuginfo< 1.24.0-5.module+el8.9.0+18724+20190c23nbdkit-nbd-plugin-debuginfo-1.24.0-5.module+el8.9.0+18724+20190c23.ppc64le.rpm
RedHatanyaarch64libvirt-daemon-driver-storage-scsi-debuginfo< 8.0.0-23.2.module+el8.10.0+21972+d7867348libvirt-daemon-driver-storage-scsi-debuginfo-8.0.0-23.2.module+el8.10.0+21972+d7867348.aarch64.rpm
RedHatanyaarch64libguestfs-gfs2< 1.44.0-9.module+el8.9.0+18724+20190c23libguestfs-gfs2-1.44.0-9.module+el8.9.0+18724+20190c23.aarch64.rpm
RedHatanyx86_64libguestfs< 1.44.0-9.module+el8.9.0+18724+20190c23libguestfs-1.44.0-9.module+el8.9.0+18724+20190c23.x86_64.rpm
RedHatanyx86_64nbdkit-linuxdisk-plugin< 1.24.0-5.module+el8.9.0+18724+20190c23nbdkit-linuxdisk-plugin-1.24.0-5.module+el8.9.0+18724+20190c23.x86_64.rpm
RedHatanys390xlibvirt-nss-debuginfo< 8.0.0-23.2.module+el8.10.0+21972+d7867348libvirt-nss-debuginfo-8.0.0-23.2.module+el8.10.0+21972+d7867348.s390x.rpm
RedHatanyaarch64libvirt-daemon-config-nwfilter< 8.0.0-23.2.module+el8.10.0+21972+d7867348libvirt-daemon-config-nwfilter-8.0.0-23.2.module+el8.10.0+21972+d7867348.aarch64.rpm
Rows per page:
1-10 of 9151

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High