Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update

Fixed packages 2

Vulnerabilities 3

• High 7.5
  CVE-2022-21216

  Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Proc…

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  Feb 16, 2023
• High 7.4
  CVE-2023-0286 Public exploit EPSS 68%

  X.400 address type confusion in X.509 GeneralName

  There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address fiel…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi PyPI crates.io
  Feb 8, 2023
• High 7.2
  CVE-2022-33196

  Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using …

  intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  Feb 16, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2164440
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2171227
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2171252
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5209.json
• report
  https://access.redhat.com/security/cve/CVE-2022-21216
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21216
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21216
• article
  https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20230214
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html
• report
  https://access.redhat.com/security/cve/CVE-2022-33196
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-33196
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-33196
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html
• report
  https://access.redhat.com/security/cve/CVE-2023-0286
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0286
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0286
• article
  https://www.openssl.org/news/secadv/20230207.txt