Skip to content
OpenAdvisories
Medium RHEA-2018:2624 1 CVE

Red Hat Enhancement Advisory: VDSM bug fix and enhancement update 4.2

Published Sep 13, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 21

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-api 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-client 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-common 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-gluster 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-hook-checkips 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-hook-cpuflags 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-hook-ethtool-options 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-hook-extra-ipv4-addrs 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-hook-fcoe 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-hook-localdisk 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-hook-macspoof 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-hook-nestedvt 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-hook-openstacknet 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-hook-vhostmd 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-hook-vmfex-dev 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-http 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-jsonrpc 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-network 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-python 0:4.20.39-1.el7ev
Red Hat · RHEL 7 enterprise_linux:7::hypervisor vdsm-yajsonrpc 0:4.20.39-1.el7ev

Vulnerabilities 1

  • Medium 6.5
    CVE-2018-10908

    It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploa…

    [UNKNOWN] vdsm

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1612904
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1614657
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618352
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhea-2018_2624.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-10908
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1605065
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-10908
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-10908
  • article
    https://gerrit.ovirt.org/#/c/93195/