ID

VAR-202207-1358


CVE

CVE-2021-33656


TITLE

Linux kernel Buffer error vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-202207-1508

DESCRIPTION

When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security, bug fix, and enhancement update Advisory ID: RHSA-2023:2951-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:2951 Issue date: 2023-05-16 CVE Names: CVE-2021-26341 CVE-2021-33655 CVE-2021-33656 CVE-2022-1462 CVE-2022-1679 CVE-2022-1789 CVE-2022-2196 CVE-2022-2663 CVE-2022-3028 CVE-2022-3239 CVE-2022-3522 CVE-2022-3524 CVE-2022-3564 CVE-2022-3566 CVE-2022-3567 CVE-2022-3619 CVE-2022-3623 CVE-2022-3625 CVE-2022-3628 CVE-2022-3707 CVE-2022-4129 CVE-2022-20141 CVE-2022-25265 CVE-2022-30594 CVE-2022-39188 CVE-2022-39189 CVE-2022-41218 CVE-2022-41674 CVE-2022-42703 CVE-2022-42720 CVE-2022-42721 CVE-2022-42722 CVE-2022-43750 CVE-2022-47929 CVE-2023-0394 CVE-2023-0461 CVE-2023-1195 CVE-2023-1582 CVE-2023-23454 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux BaseOS (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 Red Hat Enterprise Linux CRB (v. 8) - aarch64, ppc64le, x86_64 3. The following packages have been upgraded to a later upstream version: kernel (4.18.0). (BZ#2122230, BZ#2122267) Security Fix(es): * use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564) * net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461) * hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341) * malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655) * when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds (CVE-2021-33656) * possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462) * use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679) * KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789) * KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196) * netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663) * race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028) * media: em28xx: initialize refcount before kref_get (CVE-2022-3239) * race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522) * memory leak in ipv6_renew_options() (CVE-2022-3524) * data races around icsk->icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566) * data races around sk->sk_prot (CVE-2022-3567) * memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619) * denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623) * use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625) * USB-accessible buffer overflow in brcmfmac (CVE-2022-3628) * Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707) * l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129) * igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141) * Executable Space Protection Bypass (CVE-2022-25265) * Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594) * unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188) * TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189) * Report vmalloc UAF in dvb-core/dmxdev (CVE-2022-41218) * u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674) * use-after-free related to leaf anon_vma double reuse (CVE-2022-42703) * use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720) * BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721) * Denial of service in beacon protection for P2P-device (CVE-2022-42722) * memory corruption in usbmon driver (CVE-2022-43750) * NULL pointer dereference in traffic control subsystem (CVE-2022-47929) * NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394) * use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195) * Soft lockup occurred during __page_mapcount (CVE-2023-1582) * slab-out-of-bounds read vulnerabilities in cbq_classify (CVE-2023-23454) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2055499 - CVE-2022-25265 kernel: Executable Space Protection Bypass 2061703 - CVE-2021-26341 hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch 2078466 - CVE-2022-1462 kernel: possible race condition in drivers/tty/tty_buffers.c 2079311 - VMs hang after migration 2084125 - CVE-2022-1679 kernel: use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges 2085300 - CVE-2022-30594 kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option 2090723 - CVE-2022-1789 kernel: KVM: NULL pointer dereference in kvm_mmu_invpcid_gva 2108691 - CVE-2021-33655 kernel: malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory 2108696 - CVE-2021-33656 kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds 2114937 - CVE-2022-20141 kernel: igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets 2116444 - kernel: Backport vfork support for time namespaces 2122228 - CVE-2022-3028 kernel: race condition in xfrm_probe_algs can lead to OOB read/write 2122960 - CVE-2022-41218 kernel: Report vmalloc UAF in dvb-core/dmxdev 2123056 - CVE-2022-2663 kernel: netfilter: nf_conntrack_irc message handling issue 2123854 - Backport kernel audit enhancements and fixes up to upstream v6.1 2124788 - CVE-2022-39189 kernel: TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning 2127985 - CVE-2022-3239 kernel: media: em28xx: initialize refcount before kref_get 2130141 - CVE-2022-39188 kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry 2131339 - CVE-2022-4269 kernel: net: CPU soft lockup in TC mirred egress-to-ingress action [rhel-8.8.0] 2131391 - fuse readdir cache sometimes corrupted 2133483 - CVE-2022-42703 kernel: use-after-free related to leaf anon_vma double reuse 2134377 - CVE-2022-41674 kernel: u8 overflow problem in cfg80211_update_notlisted_nontrans() 2134451 - CVE-2022-42720 kernel: use-after-free in bss_ref_get in net/wireless/scan.c 2134506 - CVE-2022-42721 kernel: BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c 2134517 - CVE-2022-42722 kernel: Denial of service in beacon protection for P2P-device 2134528 - CVE-2022-4129 kernel: l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference 2137979 - CVE-2022-3707 kernel: Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed 2139728 - [Azure][RHEL8] Live resize of disk does not trigger a rescan of the device capacity 2140163 - error 524 from seccomp(2) when trying to load filter 2143893 - CVE-2022-3566 kernel: data races around icsk->icsk_af_ops in do_ipv6_setsockopt 2143943 - CVE-2022-3567 kernel: data races around sk->sk_prot 2144720 - CVE-2022-3625 kernel: use-after-free after failed devlink reload in devlink_param_get 2150947 - CVE-2022-3524 kernel: memory leak in ipv6_renew_options() 2150960 - CVE-2022-3628 kernel: USB-accessible buffer overflow in brcmfmac 2150979 - CVE-2022-3522 kernel: race condition in hugetlb_no_page() in mm/hugetlb.c 2150999 - CVE-2022-3564 kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c 2151270 - CVE-2022-43750 kernel: memory corruption in usbmon driver 2152133 - In FIPS mode, the kernel should reject SHA-224, SHA-384, SHA-512-224, and SHA-512-256 as hashes for hash-based DRBGs, or provide an indicator after 2023-05-16 2154171 - CVE-2023-1195 kernel: use-after-free caused by invalid pointer hostname in fs/cifs/connect.c 2154235 - CVE-2022-3619 kernel: memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c 2154880 - [rhel8] LTP: read_all_sys - RIP: 0010:intel_rps_get_max_frequency+0x5/0x40 [i915] 2159969 - backport vsock fixes for RHEL-8.8 2160023 - CVE-2022-2196 kernel: KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks 2162120 - CVE-2023-0394 kernel: NULL pointer dereference in rawv6_push_pending_frames 2165721 - CVE-2022-3623 kernel: denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry 2166364 - NFS hang on large dirs with kenel 4.18.0-448.el8.x86_64 2168246 - CVE-2022-47929 kernel: NULL pointer dereference in traffic control subsystem 2168297 - CVE-2023-23454 kernel: slab-out-of-bounds read vulnerabilities in cbq_classify 2176192 - CVE-2023-0461 kernel: net/ulp: use-after-free in listening ULP sockets 2180936 - CVE-2023-1582 kernel: Soft lockup occurred during __page_mapcount 6. Package List: Red Hat Enterprise Linux BaseOS (v. 8): Source: kernel-4.18.0-477.10.1.el8_8.src.rpm aarch64: bpftool-4.18.0-477.10.1.el8_8.aarch64.rpm bpftool-debuginfo-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-core-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-cross-headers-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-debug-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-debug-core-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-debug-debuginfo-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-debug-devel-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-debug-modules-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-debug-modules-extra-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-debuginfo-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-debuginfo-common-aarch64-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-devel-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-headers-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-modules-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-modules-extra-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-tools-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-tools-debuginfo-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-tools-libs-4.18.0-477.10.1.el8_8.aarch64.rpm perf-4.18.0-477.10.1.el8_8.aarch64.rpm perf-debuginfo-4.18.0-477.10.1.el8_8.aarch64.rpm python3-perf-4.18.0-477.10.1.el8_8.aarch64.rpm python3-perf-debuginfo-4.18.0-477.10.1.el8_8.aarch64.rpm noarch: kernel-abi-stablelists-4.18.0-477.10.1.el8_8.noarch.rpm kernel-doc-4.18.0-477.10.1.el8_8.noarch.rpm ppc64le: bpftool-4.18.0-477.10.1.el8_8.ppc64le.rpm bpftool-debuginfo-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-core-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-cross-headers-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-debug-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-debug-core-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-debug-debuginfo-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-debug-devel-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-debug-modules-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-debug-modules-extra-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-debuginfo-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-debuginfo-common-ppc64le-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-devel-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-headers-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-modules-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-modules-extra-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-tools-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-tools-debuginfo-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-tools-libs-4.18.0-477.10.1.el8_8.ppc64le.rpm perf-4.18.0-477.10.1.el8_8.ppc64le.rpm perf-debuginfo-4.18.0-477.10.1.el8_8.ppc64le.rpm python3-perf-4.18.0-477.10.1.el8_8.ppc64le.rpm python3-perf-debuginfo-4.18.0-477.10.1.el8_8.ppc64le.rpm s390x: bpftool-4.18.0-477.10.1.el8_8.s390x.rpm bpftool-debuginfo-4.18.0-477.10.1.el8_8.s390x.rpm kernel-4.18.0-477.10.1.el8_8.s390x.rpm kernel-core-4.18.0-477.10.1.el8_8.s390x.rpm kernel-cross-headers-4.18.0-477.10.1.el8_8.s390x.rpm kernel-debug-4.18.0-477.10.1.el8_8.s390x.rpm kernel-debug-core-4.18.0-477.10.1.el8_8.s390x.rpm kernel-debug-debuginfo-4.18.0-477.10.1.el8_8.s390x.rpm kernel-debug-devel-4.18.0-477.10.1.el8_8.s390x.rpm kernel-debug-modules-4.18.0-477.10.1.el8_8.s390x.rpm kernel-debug-modules-extra-4.18.0-477.10.1.el8_8.s390x.rpm kernel-debuginfo-4.18.0-477.10.1.el8_8.s390x.rpm kernel-debuginfo-common-s390x-4.18.0-477.10.1.el8_8.s390x.rpm kernel-devel-4.18.0-477.10.1.el8_8.s390x.rpm kernel-headers-4.18.0-477.10.1.el8_8.s390x.rpm kernel-modules-4.18.0-477.10.1.el8_8.s390x.rpm kernel-modules-extra-4.18.0-477.10.1.el8_8.s390x.rpm kernel-tools-4.18.0-477.10.1.el8_8.s390x.rpm kernel-tools-debuginfo-4.18.0-477.10.1.el8_8.s390x.rpm kernel-zfcpdump-4.18.0-477.10.1.el8_8.s390x.rpm kernel-zfcpdump-core-4.18.0-477.10.1.el8_8.s390x.rpm kernel-zfcpdump-debuginfo-4.18.0-477.10.1.el8_8.s390x.rpm kernel-zfcpdump-devel-4.18.0-477.10.1.el8_8.s390x.rpm kernel-zfcpdump-modules-4.18.0-477.10.1.el8_8.s390x.rpm kernel-zfcpdump-modules-extra-4.18.0-477.10.1.el8_8.s390x.rpm perf-4.18.0-477.10.1.el8_8.s390x.rpm perf-debuginfo-4.18.0-477.10.1.el8_8.s390x.rpm python3-perf-4.18.0-477.10.1.el8_8.s390x.rpm python3-perf-debuginfo-4.18.0-477.10.1.el8_8.s390x.rpm x86_64: bpftool-4.18.0-477.10.1.el8_8.x86_64.rpm bpftool-debuginfo-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-core-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-cross-headers-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-debug-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-debug-core-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-debug-debuginfo-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-debug-devel-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-debug-modules-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-debug-modules-extra-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-debuginfo-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-debuginfo-common-x86_64-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-devel-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-headers-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-modules-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-modules-extra-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-tools-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-tools-debuginfo-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-tools-libs-4.18.0-477.10.1.el8_8.x86_64.rpm perf-4.18.0-477.10.1.el8_8.x86_64.rpm perf-debuginfo-4.18.0-477.10.1.el8_8.x86_64.rpm python3-perf-4.18.0-477.10.1.el8_8.x86_64.rpm python3-perf-debuginfo-4.18.0-477.10.1.el8_8.x86_64.rpm Red Hat Enterprise Linux CRB (v. 8): aarch64: bpftool-debuginfo-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-debug-debuginfo-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-debuginfo-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-debuginfo-common-aarch64-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-tools-debuginfo-4.18.0-477.10.1.el8_8.aarch64.rpm kernel-tools-libs-devel-4.18.0-477.10.1.el8_8.aarch64.rpm perf-debuginfo-4.18.0-477.10.1.el8_8.aarch64.rpm python3-perf-debuginfo-4.18.0-477.10.1.el8_8.aarch64.rpm ppc64le: bpftool-debuginfo-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-debug-debuginfo-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-debuginfo-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-debuginfo-common-ppc64le-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-tools-debuginfo-4.18.0-477.10.1.el8_8.ppc64le.rpm kernel-tools-libs-devel-4.18.0-477.10.1.el8_8.ppc64le.rpm perf-debuginfo-4.18.0-477.10.1.el8_8.ppc64le.rpm python3-perf-debuginfo-4.18.0-477.10.1.el8_8.ppc64le.rpm x86_64: bpftool-debuginfo-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-debug-debuginfo-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-debuginfo-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-debuginfo-common-x86_64-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-tools-debuginfo-4.18.0-477.10.1.el8_8.x86_64.rpm kernel-tools-libs-devel-4.18.0-477.10.1.el8_8.x86_64.rpm perf-debuginfo-4.18.0-477.10.1.el8_8.x86_64.rpm python3-perf-debuginfo-4.18.0-477.10.1.el8_8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBZGNu39zjgjWX9erEAQjR8A//doUSB647itItEwNVjnWUYBQhY5vM+LNx 0bBO7uUOtEno6Fo0yus1y7uVRoR6AjNghnL+4TumuMh9c5OGYrpCE3ij3ImN/RSX zbImH13s1HaeyPxXroEUhwTcAwODXicrqMu0MYOe3rqC66q+Bf7nfdxBn5KubgzX 0niXjah23bXzlQ61vsDYm/0ctUommRZyMaDFD2Pm6OycaKOJOCudiFx3sj+p0Bxw x2lDXyZpKoSpkHj9xGTzU99AvmQO/HmGjuDtx6tBH9IHRZSQWfPwqxsNUvpc7lp7 ZWbxrOl7IyJPMGqUXP6knpXsd+/rxEck2RlKyCCNQM75h6EYgYtt1NzXuQkhUj2S yRHr36YTfhXqfXTlrCHPzDca11PmYpNLwQ21PjePgmB2/eHypOxUKVT67sZY+RLp saJacLhc5xw+Wv/aV+NOrReZtT70M8HgGEA4U7NdStJh2uOBOzMGyRTIUCXtbHLT S/65Gp6+54Ez2xWD6Cgwb/R6iS4AQv0IzE4ggi5Im0BvOXgae54DBn8hqcCHOi+0 UdiB0+ILRt+m/24rxPUEuDY2N+/f/9HKyZ7FD92lBJZ8S9x1EeOEvXXmVtFwMuAE Oxt2DDjydHtoP/GrbaTNvGHOZdjCIXtKZp9aVCBtqGjIKqIzF8TwKX7+drdMS9hn 7ISc7Ji2irg=bvSS -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce . Description: Red Hat Advanced Cluster Management for Kubernetes 2.5.9 images Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which fix several bugs. Bugs fixed (https://bugzilla.redhat.com/): 2208376 - CVE-2023-32314 vm2: Sandbox Escape 2208377 - CVE-2023-32313 vm2: Inspect Manipulation 5. Bug Fix(es): * Simultaneous writes to a page on xfs can result in zero-byte data (BZ#2184103) * Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-number.rst (BZ#2208286) * Low memory deadlock with md devices and external (imsm) metadata handling - - requires a kernfs notification backport (BZ#2208542) * Windows Server 2019 guest randomly pauses with "KVM: entry failed, hardware error 0x80000021" (BZ#2211663) * Marvell 8.7 Bug qedi shutdown handler hangs upon reboot (BZ#2215334) * aacraid misses interrupts when a CPU is disabled resulting in scsi timeouts and the adapter being unusable until reboot. (BZ#2216499) * rbd: avoid fast-diff corruption in snapshot-based mirroring [8.9] (BZ#2216770) * OCS 4.8 cephfs kernel crash : mds_dispatch ceph_handle_snap unable to handle kernel NULL (BZ#2218273) * FJ8.6 Bug: System panic occurs because the list used by i40e driver is corrupted (BZ#2219262) * st_gmac tx-checksum offload on vlan is not consistent with st_gmac interface (BZ#2219908) * Regression of 3b8cc6298724 ("blk-cgroup: Optimize blkcg_rstat_flush()") (BZ#2220811) * refcount_t overflow often happens in mem_cgroup_id_get_online() (BZ#2221011) * Scheduler update (rhel8.8) (BZ#2221304) * RHEL8.6 boot panic with message "kernel BUG at lib/list_debug.c:28!" (BZ#2222247) * Enable conntrack clash resolution for GRE (BZ#2223543) * Intel 8.8 BUG SPR perf: Workaround the UPI intel_uncore_has_discovery_tables issue on SPR MCC and LCC (BZ#2225514) * KVM: x86: fix sending PV IPI (BZ#2226580) * libceph: harden msgr2.1 frame segment length checks [8.x] (BZ#2227074) Enhancement(s): * Mellanox 8.7 FEAT mlx5: It's possible to enable LRO when XDP is active (BZ#2165585) * Export symbol pci_find_host_bridge (BZ#2225335) 4. ========================================================================== Ubuntu Security Notice USN-5650-1 September 30, 2022 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-kvm: Linux kernel for cloud environments - linux-lts-xenial: Linux hardware enablement kernel from Xenial for Trusty Details: It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33655) It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33656) Christian Brauner discovered that the XFS file system implementation in the Linux kernel did not properly handle setgid file creation. A local attacker could use this to gain elevated privileges. (CVE-2021-4037) It was discovered that the ext4 file system implementation in the Linux kernel did not properly initialize memory in some situations. A privileged local attacker could use this to expose sensitive information (kernel memory). (CVE-2022-0850) Duoming Zhou discovered that the AX.25 amateur radio protocol implementation in the Linux kernel did not handle detach events properly in some situations. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-1199) Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel during device detach operations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1204) Norbert Slusarek discovered that a race condition existed in the perf subsystem in the Linux kernel, resulting in a use-after-free vulnerability. A privileged local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-1729) It was discovered that the Packet network protocol implementation in the Linux kernel contained an out-of-bounds access. A remote attacker could use this to expose sensitive information (kernel memory). (CVE-2022-20368) It was discovered that the Open vSwitch implementation in the Linux kernel contained an out of bounds write vulnerability in certain situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-2639) Jann Horn discovered that the ASIX AX88179/178A USB Ethernet driver in the Linux kernel contained multiple out-of-bounds vulnerabilities. A local attacker with physical access could plug in a specially crafted USB device to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-2964) Hao Sun and Jiacheng Xu discovered that the NILFS file system implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-2978) Abhishek Shah discovered a race condition in the PF_KEYv2 implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). (CVE-2022-3028) It was discovered that the Journaled File System (JFS) in the Linux kernel contained a null pointer dereference in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3202) Domingo Dirutigliano and Nicola Guerrera discovered that the netfilter subsystem in the Linux kernel did not properly handle rules that truncated packets below the packet header size. When such rules are in place, a remote attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-36946) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: linux-image-4.4.0-1114-kvm 4.4.0-1114.124 linux-image-4.4.0-1151-aws 4.4.0-1151.166 linux-image-4.4.0-234-generic 4.4.0-234.268 linux-image-4.4.0-234-lowlatency 4.4.0-234.268 linux-image-aws 4.4.0.1151.155 linux-image-generic 4.4.0.234.240 linux-image-kvm 4.4.0.1114.111 linux-image-lowlatency 4.4.0.234.240 linux-image-virtual 4.4.0.234.240 Ubuntu 14.04 ESM: linux-image-4.4.0-1113-aws 4.4.0-1113.119 linux-image-4.4.0-234-generic 4.4.0-234.268~14.04.1 linux-image-4.4.0-234-lowlatency 4.4.0-234.268~14.04.1 linux-image-aws 4.4.0.1113.110 linux-image-generic-lts-xenial 4.4.0.234.203 linux-image-lowlatency-lts-xenial 4.4.0.234.203 linux-image-virtual-lts-xenial 4.4.0.234.203 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-5650-1 CVE-2021-33655, CVE-2021-33656, CVE-2021-4037, CVE-2022-0850, CVE-2022-1199, CVE-2022-1204, CVE-2022-1729, CVE-2022-20368, CVE-2022-2639, CVE-2022-2964, CVE-2022-2978, CVE-2022-3028, CVE-2022-3202, CVE-2022-36946

Trust: 1.8

sources: NVD: CVE-2021-33656 // VULHUB: VHN-393734 // VULMON: CVE-2021-33656 // PACKETSTORM: 168221 // PACKETSTORM: 168263 // PACKETSTORM: 168237 // PACKETSTORM: 168177 // PACKETSTORM: 172357 // PACKETSTORM: 172703 // PACKETSTORM: 174369 // PACKETSTORM: 168589

AFFECTED PRODUCTS

vendor:huaweimodel:openeulerscope:eqversion:20.03

Trust: 1.0

vendor:debianmodel:linuxscope:eqversion:10.0

Trust: 1.0

vendor:linuxmodel:kernelscope:ltversion:5.10.127

Trust: 1.0

sources: NVD: CVE-2021-33656

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-33656
value: MEDIUM

Trust: 1.0

CNNVD: CNNVD-202207-1508
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2021-33656
baseSeverity: MEDIUM
baseScore: 6.8
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: PHYSICAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 0.9
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: CNNVD: CNNVD-202207-1508 // NVD: CVE-2021-33656

PROBLEMTYPE DATA

problemtype:CWE-787

Trust: 1.1

sources: VULHUB: VHN-393734 // NVD: CVE-2021-33656

THREAT TYPE

local

Trust: 1.1

sources: PACKETSTORM: 168221 // PACKETSTORM: 168263 // PACKETSTORM: 168237 // PACKETSTORM: 168177 // PACKETSTORM: 168589 // CNNVD: CNNVD-202207-1508

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202207-1508

PATCH

title:Linux kernel Buffer error vulnerability fixurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=207700

Trust: 0.6

sources: CNNVD: CNNVD-202207-1508

EXTERNAL IDS

db:NVDid:CVE-2021-33656

Trust: 2.6

db:OPENWALLid:OSS-SECURITY/2022/07/19/3

Trust: 1.8

db:PACKETSTORMid:168177

Trust: 0.8

db:PACKETSTORMid:168221

Trust: 0.8

db:PACKETSTORMid:168589

Trust: 0.8

db:PACKETSTORMid:168253

Trust: 0.7

db:PACKETSTORMid:168264

Trust: 0.7

db:PACKETSTORMid:168203

Trust: 0.7

db:PACKETSTORMid:168335

Trust: 0.7

db:PACKETSTORMid:168238

Trust: 0.7

db:AUSCERTid:ESB-2022.4257

Trust: 0.6

db:AUSCERTid:ESB-2022.4278

Trust: 0.6

db:AUSCERTid:ESB-2022.4342

Trust: 0.6

db:AUSCERTid:ESB-2022.4317

Trust: 0.6

db:AUSCERTid:ESB-2022.4225

Trust: 0.6

db:AUSCERTid:ESB-2023.3339

Trust: 0.6

db:AUSCERTid:ESB-2022.4087

Trust: 0.6

db:AUSCERTid:ESB-2022.4184

Trust: 0.6

db:AUSCERTid:ESB-2022.4063

Trust: 0.6

db:AUSCERTid:ESB-2023.3060

Trust: 0.6

db:AUSCERTid:ESB-2022.4118

Trust: 0.6

db:CNNVDid:CNNVD-202207-1508

Trust: 0.6

db:PACKETSTORMid:168263

Trust: 0.2

db:PACKETSTORMid:168237

Trust: 0.2

db:PACKETSTORMid:168251

Trust: 0.1

db:PACKETSTORMid:168324

Trust: 0.1

db:PACKETSTORMid:168236

Trust: 0.1

db:PACKETSTORMid:168261

Trust: 0.1

db:VULHUBid:VHN-393734

Trust: 0.1

db:VULMONid:CVE-2021-33656

Trust: 0.1

db:PACKETSTORMid:172357

Trust: 0.1

db:PACKETSTORMid:172703

Trust: 0.1

db:PACKETSTORMid:174369

Trust: 0.1

sources: VULHUB: VHN-393734 // VULMON: CVE-2021-33656 // PACKETSTORM: 168221 // PACKETSTORM: 168263 // PACKETSTORM: 168237 // PACKETSTORM: 168177 // PACKETSTORM: 172357 // PACKETSTORM: 172703 // PACKETSTORM: 174369 // PACKETSTORM: 168589 // CNNVD: CNNVD-202207-1508 // NVD: CVE-2021-33656

REFERENCES

url:https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch

Trust: 1.8

url:http://www.openwall.com/lists/oss-security/2022/07/19/3

Trust: 1.8

url:https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html

Trust: 1.7

url:https://www.openeuler.org/en/security/cve/detail.html?id=cve-2021-33656&packagename=kernel

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2021-33656

Trust: 0.8

url:https://www.auscert.org.au/bulletins/esb-2022.4317

Trust: 0.6

url:https://packetstormsecurity.com/files/168335/ubuntu-security-notice-usn-5605-1.html

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2023.3060

Trust: 0.6

url:https://packetstormsecurity.com/files/168177/ubuntu-security-notice-usn-5580-1.html

Trust: 0.6

url:https://packetstormsecurity.com/files/168238/ubuntu-security-notice-usn-5592-1.html

Trust: 0.6

url:https://packetstormsecurity.com/files/168203/ubuntu-security-notice-usn-5589-1.html

Trust: 0.6

url:https://packetstormsecurity.com/files/168589/ubuntu-security-notice-usn-5650-1.html

Trust: 0.6

url:https://cxsecurity.com/cveshow/cve-2021-33656/

Trust: 0.6

url:https://vigilance.fr/vulnerability/linux-kernel-buffer-overflow-via-pio-font-38848

Trust: 0.6

url:https://packetstormsecurity.com/files/168253/ubuntu-security-notice-usn-5595-1.html

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.4063

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.4184

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2023.3339

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.4087

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.4342

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.4257

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.4278

Trust: 0.6

url:https://packetstormsecurity.com/files/168221/ubuntu-security-notice-usn-5591-1.html

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.4225

Trust: 0.6

url:https://packetstormsecurity.com/files/168264/ubuntu-security-notice-usn-5597-1.html

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2022.4118

Trust: 0.6

url:https://nvd.nist.gov/vuln/detail/cve-2021-33655

Trust: 0.4

url:https://nvd.nist.gov/vuln/detail/cve-2022-3028

Trust: 0.3

url:https://bugzilla.redhat.com/):

Trust: 0.3

url:https://listman.redhat.com/mailman/listinfo/rhsa-announce

Trust: 0.3

url:https://access.redhat.com/security/team/contact/

Trust: 0.3

url:https://access.redhat.com/security/cve/cve-2021-33656

Trust: 0.3

url:https://ubuntu.com/security/notices/usn-5591-1

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2022-20368

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2022-36946

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-25265

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-47929

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-42703

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-4129

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-3567

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-43750

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-2196

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-3566

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-42720

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2022-20141

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-3564

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-3239

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-3628

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2022-1789

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2022-25265

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2022-2196

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-41218

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2021-26341

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-1679

Trust: 0.2

url:https://access.redhat.com/security/team/key/

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-1789

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-39188

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2023-0461

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-42721

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2023-1195

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2023-1582

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2022-30594

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-2663

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-3623

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-3619

Trust: 0.2

url:https://access.redhat.com/articles/11258

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-3028

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-3707

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-20141

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-42722

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-3522

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-3524

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-1462

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2022-1679

Trust: 0.2

url:https://access.redhat.com/security/updates/classification/#important

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2021-26341

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-39189

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-41674

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2023-0394

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-30594

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2022-3625

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2022-1462

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2022-2663

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2021-33655

Trust: 0.2

url:https://access.redhat.com/security/cve/cve-2023-23454

Trust: 0.2

url:https://www.openeuler.org/en/security/cve/detail.html?id=cve-2021-33656&amp;packagename=kernel

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://ubuntu.com/security/notices/usn-5600-1

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-33061

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-hwe-5.4/5.4.0-125.141~18.04.1

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-snapdragon/4.15.0-1136.146

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux/4.15.0-192.203

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-azure-4.15/4.15.0-1150.165

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-dell300x/4.15.0-1052.57

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-kvm/4.15.0-1126.131

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-gcp-4.15/4.15.0-1135.151

Trust: 0.1

url:https://ubuntu.com/security/notices/usn-5591-3

Trust: 0.1

url:https://ubuntu.com/security/notices/usn-5580-1

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-3239

Trust: 0.1

url:https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index

Trust: 0.1

url:https://access.redhat.com/errata/rhsa-2023:2951

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-3522

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-2795

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-25815

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-3204

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2022-2795

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-27535

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2022-3204

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-32313

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-32314

Trust: 0.1

url:https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html-single/install/index#installing

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2022-41973

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-22490

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2022-3627

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-29007

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2022-3970

Trust: 0.1

url:https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html/release_notes/

Trust: 0.1

url:https://access.redhat.com/errata/rhsa-2023:3356

Trust: 0.1

url:https://access.redhat.com/security/updates/classification/#critical

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2022-36227

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-23946

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-25652

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-1999

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2023-1829

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2023-35788

Trust: 0.1

url:https://access.redhat.com/errata/rhsa-2023:4789

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-1637

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-42896

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2023-1637

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2022-42896

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-2002

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-2124

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-28466

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-35788

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2023-28466

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-3390

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-20593

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2023-1829

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2023-20593

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2023-3390

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2023-2002

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2023-2124

Trust: 0.1

url:https://ubuntu.com/security/notices/usn-5650-1

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-1729

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-2639

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-1199

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-0850

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-2964

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-1204

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2021-4037

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-2978

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2022-3202

Trust: 0.1

sources: VULHUB: VHN-393734 // VULMON: CVE-2021-33656 // PACKETSTORM: 168221 // PACKETSTORM: 168263 // PACKETSTORM: 168237 // PACKETSTORM: 168177 // PACKETSTORM: 172357 // PACKETSTORM: 172703 // PACKETSTORM: 174369 // PACKETSTORM: 168589 // CNNVD: CNNVD-202207-1508 // NVD: CVE-2021-33656

CREDITS

Ubuntu

Trust: 0.5

sources: PACKETSTORM: 168221 // PACKETSTORM: 168263 // PACKETSTORM: 168237 // PACKETSTORM: 168177 // PACKETSTORM: 168589

SOURCES

db:VULHUBid:VHN-393734
db:VULMONid:CVE-2021-33656
db:PACKETSTORMid:168221
db:PACKETSTORMid:168263
db:PACKETSTORMid:168237
db:PACKETSTORMid:168177
db:PACKETSTORMid:172357
db:PACKETSTORMid:172703
db:PACKETSTORMid:174369
db:PACKETSTORMid:168589
db:CNNVDid:CNNVD-202207-1508
db:NVDid:CVE-2021-33656

LAST UPDATE DATE

2024-11-20T20:53:03.913000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-393734date:2022-10-29T00:00:00
db:VULMONid:CVE-2021-33656date:2022-07-19T00:00:00
db:CNNVDid:CNNVD-202207-1508date:2023-06-14T00:00:00
db:NVDid:CVE-2021-33656date:2022-10-29T02:52:00.693

SOURCES RELEASE DATE

db:VULHUBid:VHN-393734date:2022-07-18T00:00:00
db:VULMONid:CVE-2021-33656date:2022-07-18T00:00:00
db:PACKETSTORMid:168221date:2022-09-01T16:32:59
db:PACKETSTORMid:168263date:2022-09-06T16:25:57
db:PACKETSTORMid:168237date:2022-09-02T15:21:10
db:PACKETSTORMid:168177date:2022-08-25T15:28:28
db:PACKETSTORMid:172357date:2023-05-16T17:07:01
db:PACKETSTORMid:172703date:2023-06-05T17:11:53
db:PACKETSTORMid:174369date:2023-08-29T16:27:47
db:PACKETSTORMid:168589date:2022-10-01T15:15:13
db:CNNVDid:CNNVD-202207-1508date:2022-07-18T00:00:00
db:NVDid:CVE-2021-33656date:2022-07-18T15:15:08.043