Red Hat Security Advisory: virt:8.2 and virt-devel:8.2 security update
🔗 CVE IDs covered (24)
📋 Description
CVE-2021-3631 — libvirt: Insecure sVirt label generation CVE-2021-3667 — libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API CVE-2021-3682 — QEMU: usbredir: free() call on invalid pointer in bufp_alloc() CVE-2021-33285 — ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records CVE-2021-33286 — ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string CVE-2021-33287 — ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes CVE-2021-33289 — ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section CVE-2021-35266 — ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname CVE-2021-35267 — ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections CVE-2021-35268 — ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode CVE-2021-35269 — ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a specially crafted NTFS attribute from MFT CVE-2021-39251 — ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open() CVE-2021-39252 — ntfs-3g: Out-of-bounds read in ntfs_ie_lookup() CVE-2021-39253 — ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i() CVE-2021-39254 — ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize() CVE-2021-39255 — ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an invalid attribute CVE-2021-39256 — ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name() CVE-2021-39257 — ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap CVE-2021-39258 — ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find() CVE-2021-39259 — ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an unsanitized attribute length CVE-2021-39260 — ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information() CVE-2021-39261 — ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite() CVE-2021-39262 — ntfs-3g: Out-of-bounds access in ntfs_decompress() CVE-2021-39263 — ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an unsanitized attribute
🔗 References (27)
- selfhttps://access.redhat.com/errata/RHSA-2021:3704
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1977726
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1986094
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1989651
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001608
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001609
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001613
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001616
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001619
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001621
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001623
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001645
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001649
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001650
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001651
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001652
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001653
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001654
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001656
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001658
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001659
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001661
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001662
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001665
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2001667
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3704.json