Most recent entries from all

ALSA-2021:3061 — Moderate: virt:rhel and virt-devel:rhel security and bug fix update

Affected: AlmaLinux:8: libguestfs-winsupport, AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: libnbd, AlmaLinux:8: libnbd-devel, AlmaLinux:8: libvirt-dbus, AlmaLinux:8: nbdfuse, AlmaLinux:8: nbdkit, AlmaLinux:8: nbdkit-bash-completion and 25 more

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: msix: OOB access during mmio operations may lead to DoS (CVE-2020-13754)

* hivex: Buffer overflow when provided invalid node key length (CVE-2021-3504)

* QEMU: net: an assert failure via eth_get_gso_type (CVE-2020-27617)

* QEMU: net: infinite loop in loopback mode may lead to stack overflow (CVE-2021-3416)

* qemu: out-of-bound heap buffer access via an interrupt ID field (CVE-2021-20221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* cannot restart default network and firewalld: iptables: No chain/target/match by that name. (BZ#1958301)

* RHEL8.4 Nightly[0322] - KVM guest fails to find zipl boot menu index (qemu-kvm) (BZ#1975679)

bdu:2021-04581

certfr-2023-avi-0051 — De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un atta…

certfr-2023-avi-0051

EUVD-2026-20857

fkie_cve-2021-3504

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.

GHSA-5vp3-c6x6-5464

gsd-2021-3504

msrc_CVE-2021-3504 — A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the…

msrc_CVE-2021-3504

OESA-2021-1200 — hivex security update

Affected: openEuler:20.03-LTS-SP1: hivex

Hivex is a library for extracting the contents of Windows Registry "hive" files. It is designed to be secure against buggy or malicious registry files. Security Fix(es): A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.(CVE-2021-3504)

openSUSE-SU-2021:0806-1 — Security update for hivex

Security update for hivex

RHSA-2021:3061 — Red Hat Security Advisory: virt:rhel and virt-devel:rhel security and bug fix update

QEMU: msix: OOB access during mmio operations may lead to DoS QEMU: net: an assert failure via eth_get_gso_type QEMU: net: Infinite loop in loopback mode may lead to stack overflow hivex: Buffer overflow when provided invalid node key length qemu: out-of-bound heap buffer access via an interrupt ID field

SUSE-SU-2021:1760-1 — Security update for hivex

Security update for hivex

UBUNTU-CVE-2021-3504

Affected: Ubuntu:Pro:14.04:LTS: hivex, Ubuntu:Pro:16.04:LTS: hivex, Ubuntu:18.04:LTS: hivex, Ubuntu:20.04:LTS: hivex, Ubuntu:22.04:LTS: hivex, Ubuntu:24.04:LTS: hivex, Ubuntu:25.10: hivex, Ubuntu:26.04:LTS: hivex