Red Hat Security Advisory: RHV-H security, bug fix, enhancement update (redhat-virtualization-host) 4.3.13

Fixed packages 2

Vulnerabilities 4

• High 7.8
  CVE-2021-3156 Exploited Public exploit EPSS 100%

  Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…

  sudo sudo sudo Debian Ubuntu Alpine
  Jan 26, 2021

  KEV Apr 6, 2022
• Unscored —
  CVE-2020-25684

  A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the for…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2020-25685

  A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2020-25686 Public exploit

  A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2021-001
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2021-002
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1889686
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1889688
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890125
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1899378
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1916111
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1917684
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0395.json
• report
  https://access.redhat.com/security/cve/CVE-2020-25684
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25684
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25684
• article
  https://www.jsof-tech.com/disclosures/dnspooq/
• report
  https://access.redhat.com/security/cve/CVE-2020-25685
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25685
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25685
• report
  https://access.redhat.com/security/cve/CVE-2020-25686
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25686
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25686
• report
  https://access.redhat.com/security/cve/CVE-2021-3156
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3156
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3156
• article
  https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt
• article
  https://www.sudo.ws/alerts/unescape_overflow.html
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog