Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update [ovirt-4.5.1]

Fixed packages 2

Vulnerabilities 2

• High 8.1
  CVE-2022-28733

  Integer underflow in grub_net_recv_ip4_packets

  Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Under certain circumstances the total_len value may end up wrapping around to a sma…

  GNU GNU GRUB grub2 grub2-signed Debian Ubuntu Azure Linux
  Jul 20, 2023
• Unscored —
  CVE-2022-27666 Public exploit

  A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This fla…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 23, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2061633
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2070869
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2083339
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2097627
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2103984
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5678.json
• report
  https://access.redhat.com/security/cve/CVE-2022-27666
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-27666
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-27666
• article
  https://github.com/torvalds/linux/commit/ebe48d368e97d007bfeb76fcb065d6cfc4c96645
• report
  https://access.redhat.com/security/cve/CVE-2022-28733
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-28733
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-28733