RHSA-2023:3491: Important: Red Hat Virtualization Host 4.4.z SP 1 security update
Security Fix(es): kernel: use-after-free caused by l2capreassemblesdu() in net/bluetooth/l2capcore.c (CVE-2022-3564) kernel: stack overflow in doprocdointvec and procskipspaces (CVE-2022-4378) samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023) kernel: mm/mremap.c use-after-free vulnerability (CVE-2022-41222) kernel: net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461) openvswitch: ip proto 0 triggers incorrect handling (CVE-2023-1668) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:3491?
The severity level of RHSA-2023:3491 is classified as critical due to multiple vulnerabilities including a use-after-free and stack overflow.
How do I fix RHSA-2023:3491?
To fix RHSA-2023:3491, apply the latest security updates to the affected packages as specified in the Red Hat advisory.
What vulnerabilities are addressed in RHSA-2023:3491?
RHSA-2023:3491 addresses several vulnerabilities including CVE-2022-3564 (use-after-free) and CVE-2022-4378 (stack overflow).
Which software versions are affected by RHSA-2023:3491?
RHSA-2023:3491 affects versions up to 4.5.3-7.el8e of redhat-release-virtualization-host and related packages.
Is there a workaround for RHSA-2023:3491?
There is no specific workaround for RHSA-2023:3491; the recommended action is to update the affected packages.