Advisories · Technology
Red Hat Enterprise Linux 8 Advanced Virtualization.
Every CVE that names Red Hat Enterprise Linux 8 Advanced Virtualization among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.3 Low
Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- CWE-212
- CVSS 6.5 Medium
Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- CWE-193
- CVSS 6.5 Medium
Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 7.4 High
Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 6.0 Medium
Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 8.2 High
Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 3.8 Low
Qemu-kvm: information leak in virtio devices
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Information disclosure
- CVSS 5.5 Medium
Qemu-kvm: usb: assertion failure in usb_ep_get()
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 6.2 Medium
Libvirt: crash of virtinterfaced via virconnectlistinterfaces()
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 7.5 High
Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- CWE-662
- CVSS 7.4 High
Libnbd: nbd server improper certificate validation
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Weak cryptography or TLS
- CVSS 6.8 Medium
Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 7.8 High
Qemu-kvm: 'qemu-img info' leads to host file read/write
- Red Hat Advanced Virtualization for RHEL 8.2.1
- Red Hat Advanced Virtualization for RHEL 8.4.0.EUS
- Memory corruption
- CVSS 5.5 Medium
Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- CWE-672
- CVSS 6.2 Medium
Libvirt: stack use-after-free in virnetclientioeventloop()
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- CWE-562
- CVSS 5.5 Medium
Qemu-kvm: net: assertion failure in update_sctp_checksum()
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 8.2 High
Qemu: virtio: dma reentrancy issue leads to double free vulnerability
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 6.2 Medium
Libvirt: negative g_new0 length can lead to unbounded memory allocation
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Denial of service
- CVSS 5.0 Medium
Libvirt: null pointer dereference in udevconnectlistallinterfaces()
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 5.5 Medium
Libvirt: off-by-one error in udevlistinterfacesbystatus()
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 6
- CWE-193
- CVSS 6.5 Medium
Qemu: vnc: null pointer dereference in qemu_clipboard_request()
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Memory corruption
- CVSS 4.9 Medium
Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Memory corruption
- CVSS 6.4 Medium
Qemu: improper ide controller reset can lead to mbr overwrite
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- CWE-821
- CVSS 5.3 Medium
Libnbd: crash or misbehaviour when nbd server returns an unexpected block size
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 8
- CWE-241
- CVSS 7.5 High
Dma reentrancy issue (incomplete fix for cve-2021-3750)
- qemu
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 6.5 Medium
Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Denial of service
- CVSS 5.6 Medium
Triggerable assertion due to race condition in hot-unplug
- qemu
- Red Hat Enterprise Linux 6
- Denial of service
- CVSS 6.0 Medium
Out-of-bounds read information disclosure vulnerability
- qemu-kvm
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 6.0 Medium
Heap buffer overflow in virtio_crypto_sym_op_helper()
- qemu
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 3.3 Low
Qemu: 9pfs: suid/sgid bits not dropped on file write
- qemu
- Red Hat Enterprise Linux 6
- CWE-281
- CVSS 6.5 Medium
Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 6
- CWE-667
- CVSS 6.0 Medium
Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service
- qemu
- Red Hat Enterprise Linux 6
- Memory corruption