Skip to content
OpenAdvisories
Critical 2 exploited CVEs RHSA-2023:1677 5 CVEs

Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update batch#5 (oVirt-4.5.3-5)

Published Sep 16, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 redhat-virtualization-host 0:4.5.3-202304051438_8.6
Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 redhat-virtualization-host-image-update 0:4.5.3-202304051438_8.6

Vulnerabilities 5

  • High 7.9
    CVE-2023-0266 Exploited Public exploit

    Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel

    A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. …

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Mar 30, 2023
  • High 7.8
    CVE-2023-0386 Exploited Public exploit

    A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities w…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Jun 17, 2025
  • Critical 9.8
    CVE-2022-23521 EPSS 56%

    gitattributes parsing integer overflow in git

    Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes tha…

    git git git git Debian Ubuntu Azure Linux Alpine Wolfi
  • Critical 9.8
    CVE-2022-41903 Public exploit EPSS 44%

    Integer overflow in `git archive`, `git log --format` leading to RCE in git

    Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This functionality is also exposed to `git archive` via the `export-subst` gitattribute. When processing the padding operators, t…

    git git git git Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.8
    CVE-2023-0767

    An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 1…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2159505
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2162055
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2162056
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2163379
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2170377
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1677.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-23521
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-23521
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-23521
  • article
    https://github.blog/2023-01-17-git-security-vulnerabilities-announced-2/
  • article
    https://github.com/git/git/files/10430260/X41-OSTIF-Gitlab-Git-Security-Audit-20230117-public.pdf
  • article
    https://github.com/git/git/security/advisories/GHSA-c738-c5qq-xg89
  • article
    https://www.openwall.com/lists/oss-security/2023/01/17/4
  • report
    https://access.redhat.com/security/cve/CVE-2022-41903
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-41903
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-41903
  • article
    https://github.com/git/git/security/advisories/GHSA-475x-2q3q-hvwq
  • report
    https://access.redhat.com/security/cve/CVE-2023-0266
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-0266
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-0266
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=56b88b50565cd8b946a2d00b0c83927b7ebb055e
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2023-0386
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-0386
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-0386
  • article
    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a
  • report
    https://access.redhat.com/security/cve/CVE-2023-0767
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-0767
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-0767
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/#CVE-2023-0767
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-0767