(RHSA-2023:5796) Important: virt:rhel security update

2023-10-1715:00:10

access.redhat.com

kvm virtualization linux

user-space components

apis

qemu vnc

ntfs-3g buffer overflow

0.001 Low

EPSS

Percentile

20.2%

JSON

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service (CVE-2023-3354)
NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image (CVE-2022-40284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyx86_64qemu-kvm-debugsource< 4.2.0-49.module+el8.4.0+19799+49fb6160.10qemu-kvm-debugsource-4.2.0-49.module+el8.4.0+19799+49fb6160.10.x86_64.rpm
RedHatanyx86_64libvirt-daemon-driver-nwfilter< 6.0.0-35.4.module+el8.4.0+16907+31bceb87libvirt-daemon-driver-nwfilter-6.0.0-35.4.module+el8.4.0+16907+31bceb87.x86_64.rpm
RedHatanyx86_64virt-v2v-debuginfo< 1.40.2-27.module+el8.4.0+9282+0bdec052virt-v2v-debuginfo-1.40.2-27.module+el8.4.0+9282+0bdec052.x86_64.rpm
RedHatanyx86_64libvirt-debugsource< 6.0.0-35.4.module+el8.4.0+16907+31bceb87libvirt-debugsource-6.0.0-35.4.module+el8.4.0+16907+31bceb87.x86_64.rpm
RedHatanyppc64leperl-hivex< 1.3.18-21.module+el8.4.0+10770+19c037f9perl-hivex-1.3.18-21.module+el8.4.0+10770+19c037f9.ppc64le.rpm
RedHatanyx86_64nbdkit-basic-plugins-debuginfo< 1.16.2-4.module+el8.3.0+6922+fd575af8nbdkit-basic-plugins-debuginfo-1.16.2-4.module+el8.3.0+6922+fd575af8.x86_64.rpm
RedHatanyppc64lelibguestfs-devel< 1.40.2-27.module+el8.4.0+9282+0bdec052libguestfs-devel-1.40.2-27.module+el8.4.0+9282+0bdec052.ppc64le.rpm
RedHatanyppc64lelibguestfs-java-devel< 1.40.2-27.module+el8.4.0+9282+0bdec052libguestfs-java-devel-1.40.2-27.module+el8.4.0+9282+0bdec052.ppc64le.rpm
RedHatanyx86_64qemu-kvm-block-rbd-debuginfo< 4.2.0-49.module+el8.4.0+19799+49fb6160.10qemu-kvm-block-rbd-debuginfo-4.2.0-49.module+el8.4.0+19799+49fb6160.10.x86_64.rpm
RedHatanyppc64lelibvirt-daemon-driver-storage< 6.0.0-35.4.module+el8.4.0+16907+31bceb87libvirt-daemon-driver-storage-6.0.0-35.4.module+el8.4.0+16907+31bceb87.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	x86_64	qemu-kvm-debugsource	< 4.2.0-49.module+el8.4.0+19799+49fb6160.10	qemu-kvm-debugsource-4.2.0-49.module+el8.4.0+19799+49fb6160.10.x86_64.rpm
RedHat	any	x86_64	libvirt-daemon-driver-nwfilter	< 6.0.0-35.4.module+el8.4.0+16907+31bceb87	libvirt-daemon-driver-nwfilter-6.0.0-35.4.module+el8.4.0+16907+31bceb87.x86_64.rpm
RedHat	any	x86_64	virt-v2v-debuginfo	< 1.40.2-27.module+el8.4.0+9282+0bdec052	virt-v2v-debuginfo-1.40.2-27.module+el8.4.0+9282+0bdec052.x86_64.rpm
RedHat	any	x86_64	libvirt-debugsource	< 6.0.0-35.4.module+el8.4.0+16907+31bceb87	libvirt-debugsource-6.0.0-35.4.module+el8.4.0+16907+31bceb87.x86_64.rpm
RedHat	any	ppc64le	perl-hivex	< 1.3.18-21.module+el8.4.0+10770+19c037f9	perl-hivex-1.3.18-21.module+el8.4.0+10770+19c037f9.ppc64le.rpm
RedHat	any	x86_64	nbdkit-basic-plugins-debuginfo	< 1.16.2-4.module+el8.3.0+6922+fd575af8	nbdkit-basic-plugins-debuginfo-1.16.2-4.module+el8.3.0+6922+fd575af8.x86_64.rpm
RedHat	any	ppc64le	libguestfs-devel	< 1.40.2-27.module+el8.4.0+9282+0bdec052	libguestfs-devel-1.40.2-27.module+el8.4.0+9282+0bdec052.ppc64le.rpm
RedHat	any	ppc64le	libguestfs-java-devel	< 1.40.2-27.module+el8.4.0+9282+0bdec052	libguestfs-java-devel-1.40.2-27.module+el8.4.0+9282+0bdec052.ppc64le.rpm
RedHat	any	x86_64	qemu-kvm-block-rbd-debuginfo	< 4.2.0-49.module+el8.4.0+19799+49fb6160.10	qemu-kvm-block-rbd-debuginfo-4.2.0-49.module+el8.4.0+19799+49fb6160.10.x86_64.rpm
RedHat	any	ppc64le	libvirt-daemon-driver-storage	< 6.0.0-35.4.module+el8.4.0+16907+31bceb87	libvirt-daemon-driver-storage-6.0.0-35.4.module+el8.4.0+16907+31bceb87.ppc64le.rpm