Lucene search

K
redhatRedHatRHSA-2024:4373
HistoryJul 08, 2024 - 1:08 p.m.

(RHSA-2024:4373) Important: virt:rhel and virt-devel:rhel security update

2024-07-0813:08:52
access.redhat.com
rhsa-2024
virt:rhel
virt-devel:rhel
kvm
qemu-kvm
cve-2024-4467
virtualization
linux
security fix
cvss score

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for
Linux on numerous hardware platforms. The virt:rhel module contains packages
which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

  • qemu-kvm: QEMU: ‘qemu-img info’ leads to host file read/write (CVE-2024-4467)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanys390xruby-libguestfs-debuginfo< 1.44.0-5.module+el8.6.0+14480+c0a3aa0fruby-libguestfs-debuginfo-1.44.0-5.module+el8.6.0+14480+c0a3aa0f.s390x.rpm
RedHatanyx86_64libvirt-daemon-driver-qemu-debuginfo< 8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3libvirt-daemon-driver-qemu-debuginfo-8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3.x86_64.rpm
RedHatanyaarch64python3-libguestfs< 1.44.0-5.module+el8.6.0+14480+c0a3aa0fpython3-libguestfs-1.44.0-5.module+el8.6.0+14480+c0a3aa0f.aarch64.rpm
RedHatanyppc64lelibvirt-daemon-driver-network< 8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3libvirt-daemon-driver-network-8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3.ppc64le.rpm
RedHatanyppc64lenetcf-debugsource< 0.2.8-12.module+el8.6.0+14480+c0a3aa0fnetcf-debugsource-0.2.8-12.module+el8.6.0+14480+c0a3aa0f.ppc64le.rpm
RedHatanyaarch64libvirt-daemon-config-nwfilter< 8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3libvirt-daemon-config-nwfilter-8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3.aarch64.rpm
RedHatanyppc64lenbdkit-tar-plugin< 1.24.0-4.module+el8.6.0+14480+c0a3aa0fnbdkit-tar-plugin-1.24.0-4.module+el8.6.0+14480+c0a3aa0f.ppc64le.rpm
RedHatanys390xperl-sys-virt-debuginfo< 8.0.0-1.module+el8.6.0+14480+c0a3aa0fperl-Sys-Virt-debuginfo-8.0.0-1.module+el8.6.0+14480+c0a3aa0f.s390x.rpm
RedHatanyaarch64nbdkit-server< 1.24.0-4.module+el8.6.0+14480+c0a3aa0fnbdkit-server-1.24.0-4.module+el8.6.0+14480+c0a3aa0f.aarch64.rpm
RedHatanys390xlibguestfs-rescue< 1.44.0-5.module+el8.6.0+14480+c0a3aa0flibguestfs-rescue-1.44.0-5.module+el8.6.0+14480+c0a3aa0f.s390x.rpm
Rows per page:
1-10 of 7861

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High