Lucene search

K
virtuozzoVirtuozzoVZA-2023-037
HistoryNov 21, 2023 - 12:00 a.m.

Virtuozzo Hybrid Infrastructure 5.4 Update 4 Hotfix 3 (5.4.4-139)

2023-11-2100:00:00
docs.virtuozzo.com
3
virtuozzo hybrid infrastructure
update
security fix
stability
performance
vulnerability
cve-2023-23583
volume removal
libvirt
hardware compatibility
hostname update
performance improvements
cinder
neutron
nova

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

This update provides security, stability, and performance improvements.
Vulnerability id: VSTOR-77769
A security fix for CVE-2023-23583 in microcode.

Vulnerability id: VSTOR-74652
Unable to remove a volume with a specific โ€˜updated_atโ€™ value.

Vulnerability id: VSTOR-76882
When libvirt is unavailable, its help processes should be properly terminated.

Vulnerability id: VSTOR-77014
Fixed a false-positive result of the hardware compatibility check.

Vulnerability id: VSTOR-77015
Fixed an update issue related to modifying a hostname.

Vulnerability id: VSTOR-77269, VSTOR-77432
Performance improvements in the Cinder, Neutron, and Nova services in huge clusters.

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%