VirtuozzoVZA-2023-036[Important] [Security] Virtuozzo ReadyKernel Patch 163.1 for Virtuozzo Hybrid Server 7.5
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
5.1%
The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5.
Vulnerability id: CVE-2023-4622
[3.10.0-1160.53.1.vz7.185.3 to 3.10.0-1160.90.1.vz7.200.7] Null pointer dereference in Unix local sockets during sendfile().
Vulnerability id: CVE-2023-4623
[3.10.0-1160.53.1.vz7.185.3 to 3.10.0-1160.90.1.vz7.200.7] Invalid memory access in the HFSC packet scheduler.
Vulnerability id: CVE-2023-32233
[3.10.0-1160.53.1.vz7.185.3 to 3.10.0-1160.90.1.vz7.200.7] Use-after-free if modifying and deleting an anonymous set in the same nftables transaction.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Virtuozzo Hybrid Server | 7.5 | x86_64 | readykernel-patch-200.7 | < 163.1-1.vl7 | readykernel-patch-200.7-163.1-1.vl7.x86_64.rpm |
| Virtuozzo Hybrid Server | 7.5 | x86_64 | readykernel-patch-191.4 | < 163.1-1.vl7 | readykernel-patch-191.4-163.1-1.vl7.x86_64.rpm |
| Virtuozzo Hybrid Server | 7.5 | x86_64 | readykernel-patch-185.3 | < 163.1-1.vl7 | readykernel-patch-185.3-163.1-1.vl7.x86_64.rpm |
Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
5.1%