(RHSA-2024:4374) Important: virt:rhel and virt-devel:rhel security update

2024-07-0813:09:07

access.redhat.com

rhsa-2024 virt:rhel virt-devel:rhel kvm cve-2024-4467 unix acknowledgments references page defaultdict cvss_score host file read/write security update.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

JSON

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for
Linux on numerous hardware platforms. The virt:rhel module contains packages
which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

qemu-kvm: QEMU: ‘qemu-img info’ leads to host file read/write (CVE-2024-4467)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lenbdkit-devel< 1.16.2-4.module+el8.3.0+6922+fd575af8nbdkit-devel-1.16.2-4.module+el8.3.0+6922+fd575af8.ppc64le.rpm
RedHatanyppc64lelibguestfs-gobject< 1.40.2-27.module+el8.4.0+9282+0bdec052libguestfs-gobject-1.40.2-27.module+el8.4.0+9282+0bdec052.ppc64le.rpm
RedHatanyppc64lenetcf< 0.2.8-12.module+el8.1.0+4066+0f1aadabnetcf-0.2.8-12.module+el8.1.0+4066+0f1aadab.ppc64le.rpm
RedHatanyx86_64libvirt-daemon-driver-storage-scsi< 6.0.0-35.4.module+el8.4.0+16907+31bceb87libvirt-daemon-driver-storage-scsi-6.0.0-35.4.module+el8.4.0+16907+31bceb87.x86_64.rpm
RedHatanyx86_64libvirt-daemon-driver-secret-debuginfo< 6.0.0-35.4.module+el8.4.0+16907+31bceb87libvirt-daemon-driver-secret-debuginfo-6.0.0-35.4.module+el8.4.0+16907+31bceb87.x86_64.rpm
RedHatanyppc64leruby-hivex-debuginfo< 1.3.18-21.module+el8.4.0+10770+19c037f9ruby-hivex-debuginfo-1.3.18-21.module+el8.4.0+10770+19c037f9.ppc64le.rpm
RedHatanyx86_64qemu-guest-agent< 4.2.0-49.module+el8.4.0+22026+88a4f14e.11qemu-guest-agent-4.2.0-49.module+el8.4.0+22026+88a4f14e.11.x86_64.rpm
RedHatanyx86_64nbdkit-python-plugin< 1.16.2-4.module+el8.3.0+6922+fd575af8nbdkit-python-plugin-1.16.2-4.module+el8.3.0+6922+fd575af8.x86_64.rpm
RedHatanyppc64leqemu-kvm-debugsource< 4.2.0-49.module+el8.4.0+22026+88a4f14e.11qemu-kvm-debugsource-4.2.0-49.module+el8.4.0+22026+88a4f14e.11.ppc64le.rpm
RedHatanyppc64lepython3-libguestfs< 1.40.2-27.module+el8.4.0+9282+0bdec052python3-libguestfs-1.40.2-27.module+el8.4.0+9282+0bdec052.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	nbdkit-devel	< 1.16.2-4.module+el8.3.0+6922+fd575af8	nbdkit-devel-1.16.2-4.module+el8.3.0+6922+fd575af8.ppc64le.rpm
RedHat	any	ppc64le	libguestfs-gobject	< 1.40.2-27.module+el8.4.0+9282+0bdec052	libguestfs-gobject-1.40.2-27.module+el8.4.0+9282+0bdec052.ppc64le.rpm
RedHat	any	ppc64le	netcf	< 0.2.8-12.module+el8.1.0+4066+0f1aadab	netcf-0.2.8-12.module+el8.1.0+4066+0f1aadab.ppc64le.rpm
RedHat	any	x86_64	libvirt-daemon-driver-storage-scsi	< 6.0.0-35.4.module+el8.4.0+16907+31bceb87	libvirt-daemon-driver-storage-scsi-6.0.0-35.4.module+el8.4.0+16907+31bceb87.x86_64.rpm
RedHat	any	x86_64	libvirt-daemon-driver-secret-debuginfo	< 6.0.0-35.4.module+el8.4.0+16907+31bceb87	libvirt-daemon-driver-secret-debuginfo-6.0.0-35.4.module+el8.4.0+16907+31bceb87.x86_64.rpm
RedHat	any	ppc64le	ruby-hivex-debuginfo	< 1.3.18-21.module+el8.4.0+10770+19c037f9	ruby-hivex-debuginfo-1.3.18-21.module+el8.4.0+10770+19c037f9.ppc64le.rpm
RedHat	any	x86_64	qemu-guest-agent	< 4.2.0-49.module+el8.4.0+22026+88a4f14e.11	qemu-guest-agent-4.2.0-49.module+el8.4.0+22026+88a4f14e.11.x86_64.rpm
RedHat	any	x86_64	nbdkit-python-plugin	< 1.16.2-4.module+el8.3.0+6922+fd575af8	nbdkit-python-plugin-1.16.2-4.module+el8.3.0+6922+fd575af8.x86_64.rpm
RedHat	any	ppc64le	qemu-kvm-debugsource	< 4.2.0-49.module+el8.4.0+22026+88a4f14e.11	qemu-kvm-debugsource-4.2.0-49.module+el8.4.0+22026+88a4f14e.11.ppc64le.rpm
RedHat	any	ppc64le	python3-libguestfs	< 1.40.2-27.module+el8.4.0+9282+0bdec052	python3-libguestfs-1.40.2-27.module+el8.4.0+9282+0bdec052.ppc64le.rpm