VirtuozzoVZA-2023-003[Important] [Security] Virtuozzo ReadyKernel Patch 153.1 for Virtuozzo Hybrid Server 7.5
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
37.1%
The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5.
Vulnerability id: CVE-2021-45868
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Quota: check the block number when reading the block in a quota file.
Vulnerability id: CVE-2022-1353
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Kernel data leak in ‘pfkey_register’.
Vulnerability id: PSBM-145263
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Virtualize timestamps in ‘/dev/kmsg’ and syslog outputs.
Vulnerability id: PSBM-141114
[3.10.0-1160.41.1.vz7.183.5 to 3.10.0-1160.80.1.vz7.191.4] Netfilter per-CPU memory leak on error path.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Virtuozzo Hybrid Server | 7.5 | x86_64 | readykernel-patch-183.5 | < 153.1-1.vl7 | readykernel-patch-183.5-153.1-1.vl7.x86_64.rpm |
| Virtuozzo Hybrid Server | 7.5 | x86_64 | readykernel-patch-185.3 | < 153.1-1.vl7 | readykernel-patch-185.3-153.1-1.vl7.x86_64.rpm |
| Virtuozzo Hybrid Server | 7.5 | x86_64 | readykernel-patch-191.4 | < 153.1-1.vl7 | readykernel-patch-191.4-153.1-1.vl7.x86_64.rpm |
Related
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
37.1%