Summary
Ein entfernter oder lokaler, authentisierter Angreifer kann mehrere Schwachstellen in Red Enterprise Linux Advanced Virtualization ausnutzen, um einen Denial of Service zu verursachen, Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen und Informationen offenzulegen.
Product
Virtualization ist eine Virtualisierungslösung von Red Hat, die die simultane Ausführung von verschiedenen Betriebssystemen auf einem Host-System ermöglicht.
Vulnerabilities 25
-
Medium 6.7
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute…
-
Medium 6.7
In NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the function ntfs_attr_pread_i, a h…
-
Medium 6.7
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the function ntfs_inode_real_open, a …
-
Medium 6.7
A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22.
-
Medium 6.7
A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.
-
Medium 6.7
A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22.
-
Medium 6.7
A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function …
-
Medium 6.7
A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfs_attr_find_in_attrdef, in…
-
Medium 6.7
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G < 2021.8.22.
-
Medium 6.7
A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in NTFS-3G < 2021.8.22.
-
Medium 6.7
A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfs_inode_looku…
-
Medium 6.7
A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in NTFS-3G < 2021.8.22.
-
Medium 6.7
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G < 2021.8.22.
-
Medium 6.7
A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22.
-
Medium 6.7
A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs_get_attribute…
-
Unscored —
In NTFS-3G versions < 2021.8.22, when a specially crafted unicode string is supplied in an NTFS image a heap buffer ove…
-
Unscored —
In NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an NTFS image a heap buffer overfl…
-
Unscored —
A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and inc…
-
Unscored —
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied in an NTFS image a heap buffe…
-
Unscored —
NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror al…
-
Unscored —
NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is setup in the function ntfs_attr_s…
-
Unscored —
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one…
-
Unscored —
An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoo…
-
Unscored —
A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping…
-
Unscored —
A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain (starting from ntfs…
Revision history
-
#9
Neue Updates von Oracle Linux aufgenommen
-
#8
Neue Updates von Oracle Linux aufgenommen
-
#7
Neue Updates von Gentoo aufgenommen
-
#6
Neue Updates von Red Hat aufgenommen
-
#5
Neue Updates von Debian aufgenommen
-
#4
Neue Updates von Red Hat aufgenommen
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von SUSE aufgenommen
-
#1
Initiale Fassung
References
-
Red Hat Security Advisory RHSA-2021:4191 vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4191
-
RedHat Security Advisory vom 2021-09-30
https://access.redhat.com/errata/RHSA-2021:3703
-
RedHat Security Advisory vom 2021-09-30
https://access.redhat.com/errata/RHSA-2021:3704
-
SUSE Security Update SUSE-SU-2021:3277-1 vom 2021-10-04
https://lists.suse.com/pipermail/sle-security-updates/2021-October/009530.html
-
SUSE Security Update SUSE-SU-2021:3586-1 vom 2021-10-29
https://lists.suse.com/pipermail/sle-security-updates/2021-October/009684.html
-
Debian Security Advisory DLA-2819 vom 2021-11-17
https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html
-
Red Hat Security Advisory RHSA-2022:1759 vom 2022-05-10
https://access.redhat.com/errata/RHSA-2022:1759
-
Gentoo Linux Security Advisory GLSA-202210-06 vom 2022-10-16
https://security.gentoo.org/glsa/202210-06
-
Oracle Linux Security Advisory ELSA-2023-6980 vom 2023-11-21
https://linux.oracle.com/errata/ELSA-2023-6980.html
-
Oracle Linux Security Advisory ELSA-2024-12605 vom 2024-09-02
https://linux.oracle.com/errata/ELSA-2024-12605.html