Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Red Hat Security Notice RHSA-2021:3703-01 for Moderate virt:av Update

red hat
Calendar Grey September 30, 2021
Dist Redhat Esm H88
Minimize vulnerabilities by upgrading the Red Hat's virt:av and virt-devel:av packages to enhance stability in virtualization environments.
An update for the virt:av and virt-devel:av modules is now available for Red Hat Enterprise Linux Advanced Virtualization 8.4

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Summary

The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.
Security Fix(es):
* QEMU: usbredir: free() call on invalid pointer in bufp_alloc() (CVE-2021-3682)
* ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records (CVE-2021-33285)
* ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string (CVE-2021-33286)
* ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes (CVE-2021-33287)
* ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section (CVE-2021-33289)
* ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname (CVE-2021-35266)
* ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections (CVE-2021-35267)
* ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode (CVE-2021-35268)
* ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a specially crafted NTFS attribute from MFT (CVE-2021-35269)
* ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open() (CVE-2021-39251)
* ntfs-3g: Out-of-bounds read in ntfs_ie_lookup() (CVE-2021-39252)
* ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i() (CVE-2021-39253)
* ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize() (CVE-2021-39254)
* ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an invalid attribute (CVE-2021-39255)
* ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name() (CVE-2021-39256)
* ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap (CVE-2021-39257)
* ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find() (CVE-2021-39258)
* ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an unsanitized attribute length (CVE-2021-39259)
* ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information() (CVE-2021-39260)
* ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite() (CVE-2021-39261)
* ntfs-3g: Out-of-bounds access in ntfs_decompress() (CVE-2021-39262)
* ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an unsanitized attribute (CVE-2021-39263)
* QEMU: net: Infinite loop in loopback mode may lead to stack overflow (CVE-2021-3416)
* libvirt: Insecure sVirt label generation (CVE-2021-3631)
* libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API (CVE-2021-3667)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* SAP/3TB VM migration slowness [idle db] (BZ#1984458)
* Detecting TSC timer frequencies requires too many privileges (BZ#1996130)

Topics%20covered

Topics Covered

security advisory moderate Red Hat bug fix virt:av virt-devel:av

References

https://access.redhat.com/security/cve/CVE-2021-3416 https://access.redhat.com/security/cve/CVE-2021-3631 https://access.redhat.com/security/cve/CVE-2021-3667 https://access.redhat.com/security/cve/CVE-2021-3682 https://access.redhat.com/security/cve/CVE-2021-33285 https://access.redhat.com/security/cve/CVE-2021-33286 https://access.redhat.com/security/cve/CVE-2021-33287 https://access.redhat.com/security/cve/CVE-2021-33289 https://access.redhat.com/security/cve/CVE-2021-35266 https://access.redhat.com/security/cve/CVE-2021-35267 https://access.redhat.com/security/cve/CVE-2021-35268 https://access.redhat.com/security/cve/CVE-2021-35269 https://access.redhat.com/security/cve/CVE-2021-39251 https://access.redhat.com/security/cve/CVE-2021-39252 https://access.redhat.com/security/cve/CVE-2021-39253 https://access.redhat.com/security/cve/CVE-2021-39254 https://access.redhat.com/security/cve/CVE-2021-39255 https://access.redhat.com/security/cve/CVE-2021-39256 https://access.redhat.com/security/cve/CVE-2021-39257 https://access.redhat.com/security/cve/CVE-2021-39258 https://access.redhat.com/security/cve/CVE-2021-39259 https://access.redhat.com/security/cve/CVE-2021-39260 https://access.redhat.com/security/cve/CVE-2021-39261 Read the Full Advisory

Package List

Advanced Virtualization for RHEL 8.4.0.Z:
Source: SLOF-20200717-1.gite18ddad8.module+el8.4.0+8855+a9e237a9.src.rpm SLOF-20200717-1.gite18ddad8.module+el8.4.0+8855+a9e237a9.src.rpm hivex-1.3.18-21.module+el8.4.0+11609+2eba841a.src.rpm libguestfs-1.44.0-2.module+el8.4.0+10146+75917d2f.src.rpm libguestfs-winsupport-8.2-2.module+el8.4.0+12717+0b0da9ad.src.rpm libiscsi-1.18.0-8.module+el8.4.0+8855+a9e237a9.src.rpm libnbd-1.6.0-3.module+el8.4.0+9856+bbc47853.src.rpm libtpms-0.7.4-4.20201106git2452a24dab.module+el8.4.0+10596+32ba7df3.src.rpm libvirt-7.0.0-14.4.module+el8.4.0+12413+d23780e6.src.rpm libvirt-dbus-1.3.0-2.module+el8.4.0+8855+a9e237a9.src.rpm libvirt-python-7.0.0-1.module+el8.4.0+9469+2eaf72bc.src.rpm nbdkit-1.24.0-1.module+el8.4.0+9341+96cf2672.src.rpm netcf-0.2.8-12.module+el8.4.0+8855+a9e237a9.src.rpm perl-Sys-Virt-7.0.0-1.module+el8.4.0+9469+2eaf72bc.src.rpm python-pyvmomi-6.7.1-7.module+el8.4.0+8855+a9e237a9.src.rpm qemu-kvm-5.2.0-16.module+el8.4.0+12596+209e4022.10.src.rpm seabios-1.14.0-1.module+el8.4.0+8855+a9e237a9.src.rpm seabios-1.14.0-1.module+el8.4.0+8855+a9e237a9.src.rpm sgabios-0.20170427git-3.module+el8.4.0+8855+a9e237a9.src.rpm sgabios-0.20170427git-3.module+el8.4.0+8855+a9e237a9.src.rpm supermin-5.2.1-1.module+el8.4.0+9751+d56db353.src.rpm

Read the Full Advisory


Advisory ID: RHSA-2021:3703-01
Product: Advanced Virtualization
Advisory URL: Issue date: 2021-09-30

Topic

An update for the virt:av and virt-devel:av modules is now available forRed Hat Enterprise Linux Advanced Virtualization 8.4.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory moderate Red Hat bug fix virt:av virt-devel:av

Relevant Releases Architectures

Advanced Virtualization for RHEL 8.4.0.Z - aarch64, noarch, ppc64le, s390x, x86_64

Bugs Fixed

1932827 - CVE-2021-3416 QEMU: net: Infinite loop in loopback mode may lead to stack overflow

1977726 - CVE-2021-3631 libvirt: Insecure sVirt label generation

1986094 - CVE-2021-3667 libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API

1989651 - CVE-2021-3682 QEMU: usbredir: free() call on invalid pointer in bufp_alloc()

1996130 - Detecting TSC timer frequencies requires too many privileges [rhel-8.4.0.z]

2001608 - CVE-2021-33285 ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records

2001609 - CVE-2021-33286 ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string

2001613 - CVE-2021-33287 ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes

2001616 - CVE-2021-33289 ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section

2001619 - CVE-2021-35266 ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname

2001621 - CVE-2021-35267 ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections

2001623 - CVE-2021-35268 ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode

2001645 - CVE-2021-35269 ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a specially crafted NTFS attribute from MFT

Read the Full Advisory

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here