SB2019030504 - Red Hat update for redhat-virtualization-host
Published: March 5, 2019
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 3 secuirty vulnerabilities.
1) Off-by-one (CVE-ID: CVE-2019-3813)
The vulnerability allows an adjacent authenticated attacker to cause DoS condition.
The vulnerability exists due to an off-by-one error in memslot_get_virt. An adjacent can trigger out-of-bounds read and cause the program to crash if it received specially crafted network traffic. In case the attacker in unauthenticated it's possible to execute arbitrary code.
2) Command injection (CVE-ID: CVE-2019-3831)
The vulnerability allows a local high-privileged attacker to execute arbitrary code on the target system.
The vulnerability exists due to exposure of exposed a systemd_run() function to the vdsm system use. A local attacker can inject arbitrary commands and execute arbitrary code with elevated privileges.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
3) Input validation error (CVE-ID: CVE-2019-6454)
The vulnerability allows a local unauthenticated attacker to cause DoS condition on the target system.The weakness exists due to incorrect handling of certain D-Bus messages. A local attacker can supply specially crafted D-Bus messages to crash the init process, resulting in a system denial-of-service (kernel panic).
Remediation
Install update from vendor's website.