VDB
ALSA-2023%3A5264
ALSA-2023%3A5264
PUBLISHED
CVSS 8.600000381469727 HIGH
Record from OSV · Published September 19, 2023
Important: virt:rhel and virt-devel:rhel security and bug fix update
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| libvirt-daemon-config-network | AlmaLinux:8 | 8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma |
| libguestfs-gobject | AlmaLinux:8 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| SLOF | AlmaLinux:8 | 20210217-1.module_el8.6.0+2880+7d9e3703 |
| supermin | AlmaLinux:8 | 5.2.1-2.module_el8.7.0+3346+68867adb |
| qemu-kvm-hw-usbredir | AlmaLinux:8 | 15:6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1 |
| nbdkit-linuxdisk-plugin | AlmaLinux:8 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| nbdkit-vddk-plugin | AlmaLinux:8 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| sgabios | AlmaLinux:8 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
| libvirt-daemon-driver-interface | AlmaLinux:8 | 8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma |
| nbdkit-xz-filter | AlmaLinux:8 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| libguestfs-tools-c | AlmaLinux:8 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| libtpms | AlmaLinux:8 | 0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b |
70 more packages have a fixed version. See every fix in Lookup.
Risk scores
CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:8 | libvirt-daemon-config-network | 0 |
| AlmaLinux:8 | libguestfs-gobject | 0 |
| AlmaLinux:8 | SLOF | 0 |
| AlmaLinux:8 | nbdkit-vddk-plugin | 0 |
| AlmaLinux:8 | sgabios | 0 |
| AlmaLinux:8 | libguestfs-tools-c | 0 |
| AlmaLinux:8 | nbdkit-basic-filters | 0 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-rbd | 0 |
| AlmaLinux:8 | nbdkit-gzip-plugin | 0 |
| AlmaLinux:8 | libvirt | 0 |
| AlmaLinux:8 | hivex-devel | 0, 0 |
| AlmaLinux:8 | netcf-devel | 0, 0 |
| AlmaLinux:8 | qemu-kvm-block-iscsi | 0 |
| AlmaLinux:8 | libvirt-nss | 0 |
| AlmaLinux:8 | hivex | 0, 0 |
| AlmaLinux:8 | libnbd | 0, 0 |
| AlmaLinux:8 | qemu-kvm-block-gluster | 0 |
| AlmaLinux:8 | libtpms | 0 |
| AlmaLinux:8 | qemu-guest-agent | 0 |
| AlmaLinux:8 | libvirt-daemon-driver-storage | 0 |
…and 110 more
Timeline
- Sep 19, 2023 CVE Published
- Mar 6, 2026 Distribution Patch (2 in total, the first dated here)
- Mar 6, 2026 Security Advisory
- Nov 2, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln ALSA-2023%3A5264
vulnetix vdb fixes ALSA-2023%3A5264Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/ALSA-2023%253A5264/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://access.redhat.com/errata/RHSA-2023:5264 advisory
- https://access.redhat.com/security/cve/CVE-2022-40284 report
- https://access.redhat.com/security/cve/CVE-2023-3354 report
- https://bugzilla.redhat.com/2216478 report
- https://bugzilla.redhat.com/2228485 report
- https://bugzilla.redhat.com/2236130 report
- https://errata.almalinux.org/8/ALSA-2023-5264.html advisory