Red Hat Security Advisory: Red Hat Virtualization Host security bug fix and enhancement update [ovirt-4.4.4]

Fixed packages 2

Vulnerabilities 4

• High 7.8
  CVE-2021-3156 Exploited Public exploit EPSS 100%

  Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…

  sudo sudo sudo Debian Ubuntu Alpine
  Jan 26, 2021

  KEV Apr 6, 2022
• Unscored —
  CVE-2020-25684

  A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the for…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2020-25685

  A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021
• Unscored —
  CVE-2020-25686 Public exploit

  A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending…

  dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  Jan 20, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2021-001
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2021-002
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1850939
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1868967
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1889686
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1889688
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1890125
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1902315
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1902646
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1909644
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1917684
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1921553
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1923126
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0401.json
• report
  https://access.redhat.com/security/cve/CVE-2020-25684
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25684
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25684
• article
  https://www.jsof-tech.com/disclosures/dnspooq/
• report
  https://access.redhat.com/security/cve/CVE-2020-25685
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25685
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25685
• report
  https://access.redhat.com/security/cve/CVE-2020-25686
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25686
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25686
• report
  https://access.redhat.com/security/cve/CVE-2021-3156
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3156
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3156
• article
  https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt
• article
  https://www.sudo.ws/alerts/unescape_overflow.html
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog