CVE-2023-32247 affecting package hyperv-daemons for versions less than 5.15.145.2-1

CVE-2023-32247 affecting package hyperv-daemons for versions less than 5.15.145.2-1. An upgraded version of the package is available that resolves this issue...

AZL-34273 CVE-2024-0565 affecting package hyperv-daemons for versions less than 5.15.153.1-1

An out-of-bounds memory read flaw was found in receiveencryptedstandard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service...

CVE-2024-21611

A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. In a Juniper Flow Monitoring jflow scenario route churn that...

AZL-33287 CVE-2023-51780 affecting package hyperv-daemons for versions less than 5.15.145.2-1

An issue was discovered in the Linux kernel before 6.6.8. dovccioctl in net/atm/ioctl.c has a use-after-free because of a vccrecvmsg race condition...

AZL-32062 CVE-2023-5972 affecting package hyperv-daemons for versions less than 5.15.143.1-1

A null pointer dereference flaw was found in the nftinner.c functionality of netfilter in the Linux kernel. This issue could allow a local user to crash the system or escalate their privileges on the system...

CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2023-5178)

The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5178 advisory. - A use-after-free vulnerability was found in drivers/nvme/target/tcp.c in nvmettcpfreecrypto due to a...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-5717)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5717 advisory. - A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Even...

CVE-2023-5178 affecting package hyperv-daemons for versions less than 5.15.137.1-1

CVE-2023-5178 affecting package hyperv-daemons for versions less than 5.15.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-5717 affecting package hyperv-daemons for versions less than 5.15.137.1-1

CVE-2023-5717 affecting package hyperv-daemons for versions less than 5.15.137.1-1. An upgraded version of the package is available that resolves this issue...

AZL-32122 CVE-2023-6111 affecting package hyperv-daemons for versions less than 5.15.143.1-1

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. The function nfttransgccatchall did not remove the catchall set element from the catchalllist when the argument sync is true, making it possible to free a...

libvirt security, bug fix, and enhancement update

9.5.0-7.0.1 - The path to the guest agent socket file can become too long and cause problems.rhbz2233744 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 9.5.0-7 - util: use 'stubDriverType' instead of just 'stubDriver' rhbz2074209 - util: add stub driver name to virPCIDevice object...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-5345)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5345 advisory. - A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploite...

CVE-2023-5345 affecting package hyperv-daemons for versions less than 5.15.135.1-1

CVE-2023-5345 affecting package hyperv-daemons for versions less than 5.15.135.1-1. A patched version of the package is available...

CVE-2023-4622 affecting package hyperv-daemons for versions less than 5.15.135.1-1

CVE-2023-4622 affecting package hyperv-daemons for versions less than 5.15.135.1-1. A patched version of the package is available...

CVE-2023-3389 affecting package hyperv-daemons for versions less than 5.15.135.1-1

CVE-2023-3389 affecting package hyperv-daemons for versions less than 5.15.135.1-1. An upgraded version of the package is available that resolves this issue...

AZL-31813 CVE-2023-1193 affecting package hyperv-daemons for versions less than 5.15.145.2-1

A use-after-free flaw was found in setupasyncwork in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work...

AZL-31777 CVE-2023-5178 affecting package hyperv-daemons for versions less than 5.15.137.1-1

A use-after-free vulnerability was found in drivers/nvme/target/tcp.c in nvmettcpfreecrypto due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead t...

AZL-31814 CVE-2023-5717 affecting package hyperv-daemons for versions less than 5.15.137.1-1

A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events perf component can be exploited to achieve local privilege escalation. If perfreadgroup is called while an event's siblinglist is smaller than its child's siblinglist, it can increment or write to memor...

CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2023-42753)

The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-42753 advisory. - An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing...

CVE-2023-42753 affecting package hyperv-daemons for versions less than 5.15.133.1-1

CVE-2023-42753 affecting package hyperv-daemons for versions less than 5.15.133.1-1. An upgraded version of the package is available that resolves this issue...