RHSA-2021:2519HighCVSS 9.8

Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.16

Published
June 22, 2021
Last Modified
October 14, 2026

🔗 CVE IDs covered (3)

CVE-2020-24489 →CVE-2021-25217 →CVE-2021-27219 →

📋 Description

CVE-2020-24489 — hw: vt-d related privilege escalation CVE-2021-25217 — dhcp: stack-based buffer overflow when parsing statements with colon-separated hex digits in config or lease files in dhcpd and dhclient CVE-2021-27219 — glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits

🎯 Affected products9

  • RHEL 7-based RHEV-H for RHEV 4 (build requirements)
  • Red Hat Virtualization 4 Hypervisor for RHEL 7
  • redhat-release-virtualization-host-0:4.3.16-1.el7ev.src as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)
  • redhat-release-virtualization-host-0:4.3.16-1.el7ev.x86_64 as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)
  • redhat-virtualization-host-0:4.3.16-20210615.0.el7_9.src as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)
  • redhat-virtualization-host-0:4.3.16-20210615.0.el7_9.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7
  • redhat-virtualization-host-image-update-0:4.3.16-20210615.0.el7_9.noarch as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)
  • redhat-virtualization-host-image-update-0:4.3.16-20210615.0.el7_9.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 7
  • redhat-virtualization-host-image-update-placeholder-0:4.3.16-1.el7ev.noarch as a component of RHEL 7-based RHEV-H for RHEV 4 (build requirements)

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/2974891

🔗 References (8)