CVE-2022-2211
Medium · 6.5CVSS
6.5
EPSS
1.0%
Published
Jul 12, 2022
CISA due date
—
Cloudanix analysis
A bug in a common tool used to examine virtual-machine disks can be triggered by a bad file, causing inspection programs to crash and interrupting automated system checks.
- Exploitation
- Requires User Interaction
- Attacker needs
- User Interaction
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- Library
- Class
- Buffer Overflow
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Integer overflow during computation of maximum matching keys inside get_keys() allows an attacker-controlled input to trigger a buffer miscalculation, resulting in a crash or excessive resource consumption.
Why it matters to the business
Virtual-machine image inspection or management services become unavailable, halting automated provisioning, compliance scanning, and forensic workflows that rely on libguestfs.
How an attack unfolds
An attacker supplies a specially crafted disk image or metadata file to any application that invokes libguestfs get_keys(); the malformed key-count calculation overflows, causing the process to abort or hang and denying service to legitimate users.
How to fix it
Upgrade libguestfs to the latest stable release that contains the corrected key-count arithmetic; rebuild and redeploy any dependent packages on Red Hat Enterprise Linux. Where immediate patching is impossible, isolate or sandbox libguestfs-using services and restrict untrusted image inputs.
How to confirm the fix worked
Re-run unit tests covering get_keys() with boundary and oversized key counts; confirm the process no longer crashes and that memory-usage telemetry remains within expected limits. Monitor package versions after updates.
Typical attack path
- Identify a service or script that uses libguestfs to inspect untrusted guest images or metadata.
- Craft a disk image or key file that forces an oversized key-count value in get_keys().
- Deliver the image through normal channels (upload, API, CI pipeline).
- Trigger the get_keys() call, inducing the overflow and process termination.
How to detect it
Search application and system logs for abrupt terminations or segmentation faults originating from libguestfs processes shortly after image-processing requests; correlate with unusual file uploads or API calls that precede the crashes.
What your security team should do
- Prioritize patching libguestfs on all systems that accept external virtual-machine images.
- Add input-size and key-count sanity checks in any wrapper scripts until patches are applied.
- Review and tighten network or API access that can feed untrusted images into libguestfs.
The record
A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or malicious actor.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:9 | guestfs-tools | 0 | 1.48.2-5.el9 |
| AlmaLinux:9 | libguestfs | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | libguestfs-appliance | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | libguestfs-bash-completion | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | libguestfs-devel | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | libguestfs-gobject | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | libguestfs-gobject-devel | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | libguestfs-inspect-icons | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | libguestfs-man-pages-ja | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | libguestfs-man-pages-uk | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | libguestfs-rescue | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | libguestfs-rsync | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | libguestfs-xfs | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | lua-guestfs | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | ocaml-libguestfs | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | ocaml-libguestfs-devel | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | perl-Sys-Guestfs | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | php-libguestfs | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | python3-libguestfs | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | ruby-libguestfs | 0 | 1:1.48.4-2.el9.alma |
| AlmaLinux:9 | virt-v2v | 0 | 1:2.0.7-6.el9 |
| AlmaLinux:9 | virt-v2v-bash-completion | 0 | 1:2.0.7-6.el9 |
| AlmaLinux:9 | virt-v2v-man-pages-ja | 0 | 1:2.0.7-6.el9 |
| AlmaLinux:9 | virt-v2v-man-pages-uk | 0 | 1:2.0.7-6.el9 |
| AlmaLinux:9 | virt-win-reg | 0 | 1.48.2-5.el9 |
| Debian:11 | libguestfs | 0 | No fix |
| Debian:12 | guestfs-tools | 0 | 1.48.2-1+deb12u1 |
| Debian:12 | libguestfs | 0 | 1:1.46.2-1 |
| Debian:13 | guestfs-tools | 0 | 1.48.3-4 |
| Debian:13 | libguestfs | 0 | 1:1.46.2-1 |
| Red Hat:enterprise_linux:8::appstream | SLOF | 0 | 0:20210217-1.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | hivex | 0 | 0:1.3.18-23.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | hivex-debuginfo | 0 | 0:1.3.18-23.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | hivex-debugsource | 0 | 0:1.3.18-23.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | hivex-devel | 0 | 0:1.3.18-23.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-appliance | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-bash-completion | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-debuginfo | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-debugsource | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-devel | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gfs2 | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gobject | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gobject-debuginfo | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gobject-devel | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-inspect-icons | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-java | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-java-debuginfo | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-java-devel | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-javadoc | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-man-pages-ja | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-man-pages-uk | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-rescue | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-rsync | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-tools | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-tools-c | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-tools-c-debuginfo | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-winsupport | 0 | 0:8.6-1.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-xfs | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libiscsi | 0 | 0:1.18.0-8.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libiscsi-debuginfo | 0 | 0:1.18.0-8.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libiscsi-debugsource | 0 | 0:1.18.0-8.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libiscsi-devel | 0 | 0:1.18.0-8.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libiscsi-utils | 0 | 0:1.18.0-8.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libiscsi-utils-debuginfo | 0 | 0:1.18.0-8.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libnbd | 0 | 0:1.6.0-5.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libnbd-bash-completion | 0 | 0:1.6.0-5.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libnbd-debuginfo | 0 | 0:1.6.0-5.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libnbd-debugsource | 0 | 0:1.6.0-5.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libnbd-devel | 0 | 0:1.6.0-5.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libtpms | 0 | 0:0.9.1-1.20211126git1ff6fe1f43.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libtpms-debuginfo | 0 | 0:0.9.1-1.20211126git1ff6fe1f43.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libtpms-debugsource | 0 | 0:0.9.1-1.20211126git1ff6fe1f43.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libtpms-devel | 0 | 0:0.9.1-1.20211126git1ff6fe1f43.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-client | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-client-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-config-network | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-config-nwfilter | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-interface | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-interface-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-network | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-network-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-nodedev | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-nodedev-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-nwfilter | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-nwfilter-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-qemu | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-qemu-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-secret | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-secret-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-core | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-core-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-disk | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-disk-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-gluster | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-gluster-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-iscsi | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-iscsi-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-iscsi-direct | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-iscsi-direct-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-logical | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-logical-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-mpath | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-mpath-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-rbd | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-rbd-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-scsi | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-scsi-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-kvm | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-dbus | 0 | 0:1.3.0-2.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-dbus-debuginfo | 0 | 0:1.3.0-2.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-dbus-debugsource | 0 | 0:1.3.0-2.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-debugsource | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-devel | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-docs | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-libs | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-libs-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-lock-sanlock | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-lock-sanlock-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-nss | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-nss-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-python | 0 | 0:8.0.0-2.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-python-debugsource | 0 | 0:8.0.0-2.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-wireshark | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | libvirt-wireshark-debuginfo | 0 | 0:8.0.0-10.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | lua-guestfs | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | lua-guestfs-debuginfo | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdfuse | 0 | 0:1.6.0-5.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdfuse-debuginfo | 0 | 0:1.6.0-5.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-bash-completion | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-basic-filters | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-basic-filters-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-basic-plugins | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-basic-plugins-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-curl-plugin | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-curl-plugin-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-debugsource | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-devel | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-example-plugins | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-example-plugins-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-gzip-filter | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-gzip-filter-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-gzip-plugin | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-gzip-plugin-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-linuxdisk-plugin | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-linuxdisk-plugin-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-nbd-plugin | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-nbd-plugin-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-python-plugin | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-python-plugin-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-server | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-server-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-ssh-plugin | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-ssh-plugin-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-tar-filter | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-tar-filter-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-tar-plugin | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-tar-plugin-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-tmpdisk-plugin | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-tmpdisk-plugin-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-vddk-plugin | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-vddk-plugin-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-xz-filter | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-xz-filter-debuginfo | 0 | 0:1.24.0-4.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | netcf | 0 | 0:0.2.8-12.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | netcf-debuginfo | 0 | 0:0.2.8-12.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | netcf-debugsource | 0 | 0:0.2.8-12.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | netcf-devel | 0 | 0:0.2.8-12.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | netcf-libs | 0 | 0:0.2.8-12.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | netcf-libs-debuginfo | 0 | 0:0.2.8-12.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | perl-Sys-Guestfs | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | perl-Sys-Guestfs-debuginfo | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | perl-Sys-Virt | 0 | 0:8.0.0-1.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | perl-Sys-Virt-debuginfo | 0 | 0:8.0.0-1.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | perl-Sys-Virt-debugsource | 0 | 0:8.0.0-1.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | perl-hivex | 0 | 0:1.3.18-23.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | perl-hivex-debuginfo | 0 | 0:1.3.18-23.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | python3-hivex | 0 | 0:1.3.18-23.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | python3-hivex-debuginfo | 0 | 0:1.3.18-23.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | python3-libguestfs | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | python3-libguestfs-debuginfo | 0 | 1:1.44.0-9.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | python3-libnbd | 0 | 0:1.6.0-5.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | python3-libnbd-debuginfo | 0 | 0:1.6.0-5.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | python3-libvirt | 0 | 0:8.0.0-2.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | python3-libvirt-debuginfo | 0 | 0:8.0.0-2.module+el8.7.0+16689+53d59bc2 |
| Red Hat:enterprise_linux:8::appstream | qemu-guest-agent | 0 | 15:6.2.0-20.module+el8.7.0+16689+53d59bc2.1 |
| Red Hat:enterprise_linux:8::appstream | qemu-guest-agent-debuginfo | 0 | 15:6.2.0-20.module+el8.7.0+16689+53d59bc2.1 |
| Red Hat:enterprise_linux:8::appstream | qemu-img | 0 | 15:6.2.0-20.module+el8.7.0+16689+53d59bc2.1 |
| Red Hat:enterprise_linux:8::appstream | qemu-img-debuginfo | 0 | 15:6.2.0-20.module+el8.7.0+16689+53d59bc2.1 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm | 0 | 15:6.2.0-20.module+el8.7.0+16689+53d59bc2.1 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm-block-curl | 0 | 15:6.2.0-20.module+el8.7.0+16689+53d59bc2.1 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm-block-curl-debuginfo | 0 | 15:6.2.0-20.module+el8.7.0+16689+53d59bc2.1 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm-block-gluster | 0 | 15:6.2.0-20.module+el8.7.0+16689+53d59bc2.1 |
Related vulnerabilities
- CVE-2024-7383 A flaw was found in libnbd. Also affects SLOF
- CVE-2024-7409 A flaw was found in the QEMU NBD Server. Also affects SLOF
- CVE-2024-4418 A race condition leading to a stack use-after-free flaw was found in libvirt. Also affects SLOF
- CVE-2024-3446 A double free vulnerability was found in QEMU virtio devices (virtio-gpu… Also affects SLOF
- CVE-2024-2494 A flaw was found in the RPC library APIs of libvirt. Also affects SLOF
- CVE-2023-3019 A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC… Also affects SLOF
- CVE-2023-1018 An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte… Also affects SLOF
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-120