virt:ol and virt-devel:rhel security update

2024-09-2400:00:00

linux.oracle.com

virt security update rhel virt-devel cve-2024-7383 cve-2024-7409 nbd server vulnerabilities

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

6.7

Confidence

Low

JSON

hivex
libguestfs
libguestfs-winsupport
libiscsi
libnbd
[1.6.0-6]

Fix CVE-2024-7383 NBD server improper certificate validation
resolves: RHEL-52728
libtpms
libvirt
libvirt-dbus
libvirt-python
nbdkit
netcf
perl-Sys-Virt
qemu-kvm
[6.2.0-53]
kvm-nbd-server-Favor-qemu_aio_context-over-iohandler-con.patch [RHEL-52611]
kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-52611]
kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52611]
Resolves: RHEL-52611
(CVE-2024-7409 virt:rhel/qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-8.10.z])
seabios
sgabios
supermin
swtpm
virt-v2v

OSVersionArchitecturePackageVersionFilename
oracle linux8srchivex< 1.3.18-23.modulehivex-1.3.18-23.module+el8.9.0+90075+85334608.src.rpm
oracle linux8srchivex< 1.3.18-23.modulehivex-1.3.18-23.module+el8.9.0+90075+85334608.src.rpm
oracle linux8srclibguestfs< 1.44.0-9.0.2.modulelibguestfs-1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8.src.rpm
oracle linux8srclibguestfs< 1.44.0-9.0.2.modulelibguestfs-1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8.src.rpm
oracle linux8srclibguestfs-winsupport< 8.10-1.modulelibguestfs-winsupport-8.10-1.module+el8.10.0+90308+7c659588.src.rpm
oracle linux8srclibguestfs-winsupport< 8.10-1.modulelibguestfs-winsupport-8.10-1.module+el8.10.0+90308+7c659588.src.rpm
oracle linux8srclibiscsi< 1.18.0-8.modulelibiscsi-1.18.0-8.module+el8.9.0+90052+d3bf71d8.src.rpm
oracle linux8srclibiscsi< 1.18.0-8.modulelibiscsi-1.18.0-8.module+el8.9.0+90052+d3bf71d8.src.rpm
oracle linux8srclibnbd< 1.6.0-6.modulelibnbd-1.6.0-6.module+el8.10.0+90410+bcde3bf4.src.rpm
oracle linux8srclibnbd< 1.6.0-6.modulelibnbd-1.6.0-6.module+el8.10.0+90410+bcde3bf4.src.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	hivex	< 1.3.18-23.module	hivex-1.3.18-23.module+el8.9.0+90075+85334608.src.rpm
oracle linux	8	src	hivex	< 1.3.18-23.module	hivex-1.3.18-23.module+el8.9.0+90075+85334608.src.rpm
oracle linux	8	src	libguestfs	< 1.44.0-9.0.2.module	libguestfs-1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8.src.rpm
oracle linux	8	src	libguestfs	< 1.44.0-9.0.2.module	libguestfs-1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8.src.rpm
oracle linux	8	src	libguestfs-winsupport	< 8.10-1.module	libguestfs-winsupport-8.10-1.module+el8.10.0+90308+7c659588.src.rpm
oracle linux	8	src	libguestfs-winsupport	< 8.10-1.module	libguestfs-winsupport-8.10-1.module+el8.10.0+90308+7c659588.src.rpm
oracle linux	8	src	libiscsi	< 1.18.0-8.module	libiscsi-1.18.0-8.module+el8.9.0+90052+d3bf71d8.src.rpm
oracle linux	8	src	libiscsi	< 1.18.0-8.module	libiscsi-1.18.0-8.module+el8.9.0+90052+d3bf71d8.src.rpm
oracle linux	8	src	libnbd	< 1.6.0-6.module	libnbd-1.6.0-6.module+el8.10.0+90410+bcde3bf4.src.rpm
oracle linux	8	src	libnbd	< 1.6.0-6.module	libnbd-1.6.0-6.module+el8.10.0+90410+bcde3bf4.src.rpm