Skip to content
OpenAdvisories
Medium RHBA-2020:1310 1 CVE

Red Hat Bug Fix Advisory: Red Hat Virtualization Host (redhat-virtualization-host) 4.3.9 async

Published Sep 13, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::hypervisor cockpit-ovirt 0:0.13.10-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor cockpit-ovirt-dashboard 0:0.13.10-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor redhat-release-virtualization-host 0:4.3.9-2.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor redhat-virtualization-host 0:4.3.9-20200324.0.el7_8
Red Hat · RHEL 7 enterprise_linux:7::hypervisor redhat-virtualization-host-image-update 0:4.3.9-20200324.0.el7_8
Red Hat · RHEL 7 enterprise_linux:7::hypervisor redhat-virtualization-host-image-update-placeholder 0:4.3.9-2.el7ev

Vulnerabilities 1

  • Medium 6.5
    CVE-2018-14404

    Nokogiri NULL Pointer Dereference

    A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with th…

    libxml2 libxml2 nokogiri libxml2 Debian Ubuntu Alpine RubyGems

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1796967
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1801240
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1804999
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1814137
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1814193
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_1310.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-14404
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1595985
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-14404
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-14404