VDB
ALSA-2023%3A6939
ALSA-2023%3A6939
PUBLISHED
CVSS 9.199999809265137 CRITICAL
Record from OSV · Published November 14, 2023
Moderate: container-tools:rhel8 security and bug fix update
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| fuse-overlayfs | AlmaLinux:8 | 1.12-1.module_el8.9.0+3643+9234dc3b |
| podman-tests | AlmaLinux:8 | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b |
| buildah | AlmaLinux:8 | 1:1.31.3-1.module_el8.9.0+3643+9234dc3b |
| podman | AlmaLinux:8 | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b |
| container-selinux | AlmaLinux:8 | 2:2.221.0-1.module_el8.9.0+3643+9234dc3b |
| skopeo-tests | AlmaLinux:8 | 2:1.13.3-1.module_el8.9.0+3643+9234dc3b |
| containernetworking-plugins | AlmaLinux:8 | 1:1.3.0-4.module_el8.9.0+3643+9234dc3b |
| criu-libs | AlmaLinux:8 | 3.18-4.module_el8.9.0+3643+9234dc3b |
| buildah-tests | AlmaLinux:8 | 1:1.31.3-1.module_el8.9.0+3643+9234dc3b |
| podman-gvproxy | AlmaLinux:8 | 3:4.6.1-4.module_el8.9.0+3643+9234dc3b |
| conmon | AlmaLinux:8 | 3:2.1.8-1.module_el8.9.0+3643+9234dc3b |
| aardvark-dns | AlmaLinux:8 | 2:1.7.0-1.module_el8.9.0+3657+d86e192f |
22 more packages have a fixed version. See every fix in Lookup.
Risk scores
CVSS 4.0
9.199999809265137
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:8 | buildah | 0 |
| AlmaLinux:8 | container-selinux | 0 |
| AlmaLinux:8 | criu-libs | 0 |
| AlmaLinux:8 | containernetworking-plugins | 0 |
| AlmaLinux:8 | aardvark-dns | 0 |
| AlmaLinux:8 | podman-remote | 0 |
| AlmaLinux:8 | podman-gvproxy | 0 |
| AlmaLinux:8 | python3-criu | 0 |
| AlmaLinux:8 | criu | 0 |
| AlmaLinux:8 | fuse-overlayfs | 0 |
| AlmaLinux:8 | udica | 0 |
| AlmaLinux:8 | skopeo | 0 |
| AlmaLinux:8 | podman-plugins | 0 |
| AlmaLinux:8 | crit | 0 |
| AlmaLinux:8 | conmon | 0 |
| AlmaLinux:8 | toolbox-tests | 0 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 0 |
| AlmaLinux:8 | criu-devel | 0 |
| AlmaLinux:8 | skopeo-tests | 0 |
| AlmaLinux:8 | containers-common | 0 |
…and 14 more
Timeline
- Nov 14, 2023 CVE Published
- Mar 12, 2026 Distribution Patch (2 in total, the first dated here)
- Mar 12, 2026 Security Advisory
- Oct 29, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln ALSA-2023%3A6939
vulnetix vdb fixes ALSA-2023%3A6939Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/ALSA-2023%253A6939/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://access.redhat.com/errata/RHSA-2023:6939 advisory
- https://access.redhat.com/security/cve/CVE-2022-3064 report
- https://access.redhat.com/security/cve/CVE-2022-41723 report
- https://access.redhat.com/security/cve/CVE-2022-41724 report
- https://access.redhat.com/security/cve/CVE-2022-41725 report
- https://access.redhat.com/security/cve/CVE-2023-24534 report
- https://access.redhat.com/security/cve/CVE-2023-24536 report
- https://access.redhat.com/security/cve/CVE-2023-24537 report
- https://access.redhat.com/security/cve/CVE-2023-24538 report
- https://access.redhat.com/security/cve/CVE-2023-24539 report
- https://access.redhat.com/security/cve/CVE-2023-24540 report
- https://access.redhat.com/security/cve/CVE-2023-25173 report
- https://access.redhat.com/security/cve/CVE-2023-25809 report
- https://access.redhat.com/security/cve/CVE-2023-27561 report
- https://access.redhat.com/security/cve/CVE-2023-28642 report
- https://access.redhat.com/security/cve/CVE-2023-29400 report
- https://access.redhat.com/security/cve/CVE-2023-29406 report
- https://access.redhat.com/security/cve/CVE-2023-3978 report
- https://bugzilla.redhat.com/2163037 report
- https://bugzilla.redhat.com/2174485 report
…and 16 more