VirtuozzoVZA-2024-037[Important] [Security] Virtuozzo ReadyKernel Patch 169.0 for Virtuozzo Hybrid Server 7.5
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
The cumulative Virtuozzo ReadyKernel patch was updated with a security fix. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5. NOTE: The kernel 3.10.0-1160.80.1.vz7.191.4 has reached the end of its support period. No more ReadyKernel updates are planned for this kernel.
Vulnerability id: CVE-2024-36971
[3.10.0-1160.90.1.vz7.200.7 to 3.10.0-1160.105.1.vz7.214.3] A use-after-free vulnerability in network route management.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Virtuozzo Hybrid Server | 7.5 | x86_64 | readykernel-patch-200.7 | < 169.0-1.vl7 | readykernel-patch-200.7-169.0-1.vl7.x86_64.rpm |
| Virtuozzo Hybrid Server | 7.5 | x86_64 | readykernel-patch-214.3 | < 169.0-1.vl7 | readykernel-patch-214.3-169.0-1.vl7.x86_64.rpm |
Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low