Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.21

Fixed packages 2

Vulnerabilities 2

• High 7.8
  CVE-2021-4034 Exploited · Ransomware Public exploit EPSS 95%

  A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…

  policykit-1 policykit-1 polkit polkit Debian Ubuntu Azure Linux Alpine
  Jan 28, 2022

  KEV Jun 27, 2022
• Unscored —
  CVE-2020-25717

  A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to ca…

  samba samba samba samba Debian Ubuntu Azure Linux Alpine
  Feb 18, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2022-001
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2019672
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2025869
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0443.json
• report
  https://access.redhat.com/security/cve/CVE-2020-25717
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25717
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25717
• article
  https://www.samba.org/samba/security/CVE-2020-25717.html
• report
  https://access.redhat.com/security/cve/CVE-2021-4034
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-4034
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-4034
• article
  https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog