Most recent entries from all

ALSA-2023:5264 — Important: virt:rhel and virt-devel:rhel security and bug fix update

Affected: AlmaLinux:8: SLOF, AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-appliance, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel and 120 more

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service (CVE-2023-3354) * NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image (CVE-2022-40284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* "No bootable device" with OS boot disk interface VirtIO-SCSI and with more than 9 VirtIO disks. (BZ#2228485)

bdu:2022-06607

ESSA-2023:0374 — security update for virt:rhel module

security update for virt:rhel module

EUVD-2026-236653

fkie_cve-2022-40284

A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon attachment of an external storage device.

gsd-2022-40284

msrc_CVE-2022-40284 — A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code executio…

msrc_CVE-2022-40284

OESA-2022-2095 — ntfs-3g security update

Affected: openEuler:20.03-LTS-SP1: ntfs-3g, openEuler:20.03-LTS-SP3: ntfs-3g, openEuler:22.03-LTS: ntfs-3g

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems.It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. Security Fix(es): A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon attachment of an external storage device.(CVE-2022-40284)

RHSA-2023:5239 — Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update

NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service

SUSE-SU-2022:3865-1 — Security update for ntfs-3g_ntfsprogs

Security update for ntfs-3g_ntfsprogs

UBUNTU-CVE-2022-40284

Affected: Ubuntu:Pro:14.04:LTS: ntfs-3g, Ubuntu:Pro:16.04:LTS: ntfs-3g, Ubuntu:18.04:LTS: ntfs-3g, Ubuntu:20.04:LTS: ntfs-3g, Ubuntu:22.04:LTS: ntfs-3g

WID-SEC-W-2023-2780 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.