Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]

Fixed packages 2

Vulnerabilities 4

• High 7.8
  CVE-2021-3560 Exploited Public exploit EPSS 22%

  It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privil…

  policykit-1 policykit-1 polkit Debian Ubuntu Alpine
  Feb 16, 2022

  KEV May 12, 2023
• Unscored —
  CVE-2020-24489

  Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of p…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  Jun 9, 2021
• Unscored —
  CVE-2021-27219

  An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer o…

  glib2.0 glib2.0 glib glib Debian Ubuntu Azure Linux Alpine
  Feb 15, 2021
• Unscored —
  CVE-2021-3501

  A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  May 5, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1903997
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1929858
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1950136
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1961710
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1962650
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2522.json
• report
  https://access.redhat.com/security/cve/CVE-2020-24489
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-24489
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-24489
• report
  https://access.redhat.com/security/cve/CVE-2021-3501
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3501
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3501
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c4f2ee3f68c9a4bf1653d15f1a9a435ae33f7a
• report
  https://access.redhat.com/security/cve/CVE-2021-3560
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3560
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3560
• article
  https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2021-27219
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-27219
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-27219