VDB

RHSA-2024%3A4420

RHSA-2024%3A4420 PUBLISHED CVSS 7.800000190734863 HIGH

Record from OSV · Published September 13, 2024

Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
ocaml-libguestfs-debuginfoRed Hat:enterprise_linux:8::crb1.44.0-9.module, 1:1.44.0-9.module+el8.9.0+18724+20190c23
libvirt-dbus-debugsourceRed Hat:enterprise_linux:8::crb1.3.0-2.module, 0:1.3.0-2.module+el8.9.0+18724+20190c23
seabiosRed Hat:enterprise_linux:8::crb1.16.0-4.module, 0:1.16.0-4.module+el8.9.0+19570+14a90618
libvirt-daemon-driver-storage-iscsi-direct-debuginfoRed Hat:enterprise_linux:8::crb8.0.0-23.2.module, 0:8.0.0-23.2.module+el8.10.0+21972+d7867348
perl-hivexRed Hat:enterprise_linux:8::appstream1.3.18-23.module, 0:1.3.18-23.module+el8.9.0+18724+20190c23
libvirt-daemon-driver-networkRed Hat:enterprise_linux:8::crb8.0.0-23.2.module, 0:8.0.0-23.2.module+el8.10.0+21972+d7867348
qemu-kvm-block-gluster-debuginfoRed Hat:enterprise_linux:8::appstream15:6.2.0-50.module+el8.10.0+22027+db0a70a4, 6.2.0-50.module
python3-libnbdRed Hat:enterprise_linux:8::appstream1.6.0-5.module, 0:1.6.0-5.module+el8.9.0+18724+20190c23
libguestfs-xfsRed Hat:enterprise_linux:8::appstream1.44.0-9.module, 1:1.44.0-9.module+el8.9.0+18724+20190c23
virt-v2v-debuginfoRed Hat:enterprise_linux:8::appstream1.42.0-22.module, 1:1.42.0-22.module+el8.9.0+18724+20190c23
nbdkit-debuginfoRed Hat:enterprise_linux:8::appstream1.24.0-5.module, 0:1.24.0-5.module+el8.9.0+18724+20190c23
perl-hivexRed Hat:enterprise_linux:8::crb1.3.18-23.module, 0:1.3.18-23.module+el8.9.0+18724+20190c23

88 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersions
Red Hat:enterprise_linux:8::crbocaml-libguestfs-debuginfo0, 0
Red Hat:enterprise_linux:8::crblibvirt-dbus-debugsource0, 0
Red Hat:enterprise_linux:8::crbseabios0, 0
Red Hat:enterprise_linux:8::crblibvirt-daemon-driver-storage-iscsi-direct-debuginfo0, 0
Red Hat:enterprise_linux:8::appstreamperl-hivex0, 0
Red Hat:enterprise_linux:8::crblibvirt-daemon-driver-network0, 0
Red Hat:enterprise_linux:8::appstreamqemu-kvm-block-gluster-debuginfo0, 0
Red Hat:enterprise_linux:8::appstreampython3-libnbd0, 0
Red Hat:enterprise_linux:8::appstreamlibguestfs-xfs0, 0
Red Hat:enterprise_linux:8::appstreamvirt-v2v-debuginfo0, 0
Red Hat:enterprise_linux:8::appstreamnbdkit-debuginfo0, 0
Red Hat:enterprise_linux:8::crbperl-hivex0, 0
Red Hat:enterprise_linux:8::crblibvirt-daemon-driver-nodedev0, 0
Red Hat:enterprise_linux:8::appstreamqemu-kvm-ui-spice0, 0
Red Hat:enterprise_linux:8::appstreamlibvirt-daemon-driver-storage-disk-debuginfo0, 0
Red Hat:enterprise_linux:8::crbocaml-libguestfs-devel0, 0
Red Hat:enterprise_linux:8::crblibvirt-daemon-config-nwfilter0, 0
Red Hat:enterprise_linux:8::appstreamnbdkit-tar-plugin0, 0
Red Hat:enterprise_linux:8::appstreamlibvirt-debugsource0, 0
Red Hat:enterprise_linux:8::crblibvirt-wireshark0, 0

…and 296 more

Timeline

  • Sep 13, 2024 CVE Published
  • May 1, 2026 CVE Updated
  • May 1, 2026 Distribution Patch (2 in total, the first dated here)
  • May 1, 2026 Security Advisory (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2024%3A4420
vulnetix vdb fixes RHSA-2024%3A4420

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2024%253A4420/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›