Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.22

Fixed packages 2

Vulnerabilities 12

• Medium 6.4
  CVE-2021-0920 Exploited

  In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to loc…

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  Dec 15, 2021

  KEV May 23, 2022
• Critical 9.8
  CVE-2022-25235 Public exploit

  xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a U…

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 16, 2022
• Critical 9.8
  CVE-2022-25236 Public exploit EPSS 35%

  xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespac…

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 16, 2022
• Critical 9.8
  CVE-2022-25315 Public exploit

  In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

  thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  Feb 18, 2022
• High 7.8
  CVE-2022-22942 Public exploit

  The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 13, 2023
• High 7.5
  CVE-2022-0778 Public exploit EPSS 73%

  Infinite loop in BN_mod_sqrt() reachable when parsing certificates

  The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io
  Mar 15, 2022
• Unscored —
  CVE-2021-4028

  A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 24, 2022
• Unscored —
  CVE-2021-4083

  A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers i…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jan 18, 2022
• Unscored —
  CVE-2021-4155

  A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files wi…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Aug 24, 2022
• Unscored —
  CVE-2021-45417

  AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attribu…

  aide aide Debian Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2022-0330

  A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 25, 2022
• Unscored —
  CVE-2022-24407

  In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDAT…

  cyrus-sasl2 cyrus-sasl cyrus-sasl cyrus-sasl2 Debian Ubuntu Azure Linux Alpine
  Feb 23, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2027201
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2029923
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2031930
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2034813
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2041489
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2042404
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2044809
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2048409
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2055326
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2056363
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2056366
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2056370
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2062202
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1263.json
• report
  https://access.redhat.com/security/cve/CVE-2021-0920
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-0920
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-0920
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cbcf01128d0a92e131bd09f1688fe032480b65ca
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2021-4028
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-4028
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-4028
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bc0bdc5afaa74
• article
  https://lkml.org/lkml/2021/10/4/697
• report
  https://access.redhat.com/security/cve/CVE-2021-4083
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-4083
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-4083
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=054aa8d439b9
• report
  https://access.redhat.com/security/cve/CVE-2021-4155
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-4155
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-4155
• article
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=983d8e60f50806f90534cc5373d0ce867e5aaf79
• report
  https://access.redhat.com/security/cve/CVE-2021-45417
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-45417
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-45417
• report
  https://access.redhat.com/security/cve/CVE-2022-0330
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-0330
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-0330