Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | redhat-release-virtualization-host | 0:4.5.3-10.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | redhat-release-virtualization-host-content | 0:4.5.3-10.el8ev |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | redhat-virtualization-host | 0:4.5.3-202312060823_8.6 |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | redhat-virtualization-host-image-update | 0:4.5.3-202312060823_8.6 |
| Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 | redhat-virtualization-host-image-update-placeholder | 0:4.5.3-10.el8ev |
Vulnerabilities 1
-
High 7.8
Glibc: buffer overflow in ld.so leading to privilege escalation
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binar…
KEV Nov 21, 2023
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2238352
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0033.json
-
report
https://access.redhat.com/security/cve/CVE-2023-4911
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-4911
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-4911
-
article
https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt
-
article
https://www.qualys.com/cve-2023-4911/
-
article
https://www.cisa.gov/known-exploited-vulnerabilities-catalog