(RHSA-2024:3253) Moderate: virt:rhel and virt-devel:rhel security update

2024-05-2210:41:20

access.redhat.com

rhsa-2024-3253

virtualization

kvm

libvirt

cve-2024-2494

security update

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.5%

JSON

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64nbdkit-server< 1.24.0-5.module+el8.9.0+18724+20190c23nbdkit-server-1.24.0-5.module+el8.9.0+18724+20190c23.aarch64.rpm
RedHatanys390xlibvirt-dbus-debuginfo< 1.3.0-2.module+el8.9.0+18724+20190c23libvirt-dbus-debuginfo-1.3.0-2.module+el8.9.0+18724+20190c23.s390x.rpm
RedHatanyx86_64python3-hivex< 1.3.18-23.module+el8.9.0+18724+20190c23python3-hivex-1.3.18-23.module+el8.9.0+18724+20190c23.x86_64.rpm
RedHatanys390xlibvirt-daemon-driver-interface< 8.0.0-23.1.module+el8.10.0+21659+98b2ad6alibvirt-daemon-driver-interface-8.0.0-23.1.module+el8.10.0+21659+98b2ad6a.s390x.rpm
RedHatanyaarch64qemu-kvm-block-ssh-debuginfo< 6.2.0-49.module+el8.10.0+21533+3df3c4b6qemu-kvm-block-ssh-debuginfo-6.2.0-49.module+el8.10.0+21533+3df3c4b6.aarch64.rpm
RedHatanyppc64lesupermin-debuginfo< 5.2.1-2.module+el8.9.0+18724+20190c23supermin-debuginfo-5.2.1-2.module+el8.9.0+18724+20190c23.ppc64le.rpm
RedHatanyaarch64ruby-hivex-debuginfo< 1.3.18-23.module+el8.9.0+18724+20190c23ruby-hivex-debuginfo-1.3.18-23.module+el8.9.0+18724+20190c23.aarch64.rpm
RedHatanyaarch64libvirt-daemon-driver-storage< 8.0.0-23.1.module+el8.10.0+21659+98b2ad6alibvirt-daemon-driver-storage-8.0.0-23.1.module+el8.10.0+21659+98b2ad6a.aarch64.rpm
RedHatanys390xnetcf< 0.2.8-12.module+el8.9.0+18724+20190c23netcf-0.2.8-12.module+el8.9.0+18724+20190c23.s390x.rpm
RedHatanys390xswtpm-tools-debuginfo< 0.7.0-4.20211109gitb79fd91.module+el8.9.0+18724+20190c23swtpm-tools-debuginfo-0.7.0-4.20211109gitb79fd91.module+el8.9.0+18724+20190c23.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	aarch64	nbdkit-server	< 1.24.0-5.module+el8.9.0+18724+20190c23	nbdkit-server-1.24.0-5.module+el8.9.0+18724+20190c23.aarch64.rpm
RedHat	any	s390x	libvirt-dbus-debuginfo	< 1.3.0-2.module+el8.9.0+18724+20190c23	libvirt-dbus-debuginfo-1.3.0-2.module+el8.9.0+18724+20190c23.s390x.rpm
RedHat	any	x86_64	python3-hivex	< 1.3.18-23.module+el8.9.0+18724+20190c23	python3-hivex-1.3.18-23.module+el8.9.0+18724+20190c23.x86_64.rpm
RedHat	any	s390x	libvirt-daemon-driver-interface	< 8.0.0-23.1.module+el8.10.0+21659+98b2ad6a	libvirt-daemon-driver-interface-8.0.0-23.1.module+el8.10.0+21659+98b2ad6a.s390x.rpm
RedHat	any	aarch64	qemu-kvm-block-ssh-debuginfo	< 6.2.0-49.module+el8.10.0+21533+3df3c4b6	qemu-kvm-block-ssh-debuginfo-6.2.0-49.module+el8.10.0+21533+3df3c4b6.aarch64.rpm
RedHat	any	ppc64le	supermin-debuginfo	< 5.2.1-2.module+el8.9.0+18724+20190c23	supermin-debuginfo-5.2.1-2.module+el8.9.0+18724+20190c23.ppc64le.rpm
RedHat	any	aarch64	ruby-hivex-debuginfo	< 1.3.18-23.module+el8.9.0+18724+20190c23	ruby-hivex-debuginfo-1.3.18-23.module+el8.9.0+18724+20190c23.aarch64.rpm
RedHat	any	aarch64	libvirt-daemon-driver-storage	< 8.0.0-23.1.module+el8.10.0+21659+98b2ad6a	libvirt-daemon-driver-storage-8.0.0-23.1.module+el8.10.0+21659+98b2ad6a.aarch64.rpm
RedHat	any	s390x	netcf	< 0.2.8-12.module+el8.9.0+18724+20190c23	netcf-0.2.8-12.module+el8.9.0+18724+20190c23.s390x.rpm
RedHat	any	s390x	swtpm-tools-debuginfo	< 0.7.0-4.20211109gitb79fd91.module+el8.9.0+18724+20190c23	swtpm-tools-debuginfo-0.7.0-4.20211109gitb79fd91.module+el8.9.0+18724+20190c23.s390x.rpm