RHSA-2021:3703MediumCVSS 8.5

Red Hat Security Advisory: virt:av and virt-devel:av security and bug fix update

Published
September 30, 2021
Last Modified
November 6, 2026

🔗 CVE IDs covered (25)

CVE-2021-39263 →CVE-2021-3416 →CVE-2021-3631 →CVE-2021-33285 →CVE-2021-33287 →CVE-2021-33289 →CVE-2021-35268 →CVE-2021-39256 →CVE-2021-39259 →CVE-2021-3667 →CVE-2021-33286 →CVE-2021-35266 →CVE-2021-35269 →CVE-2021-39251 →CVE-2021-39252 →CVE-2021-39257 →CVE-2021-39258 →CVE-2021-3682 →CVE-2021-39253 →CVE-2021-39254 →CVE-2021-39260 →CVE-2021-39262 →CVE-2021-35267 →CVE-2021-39255 →CVE-2021-39261 →

📋 Description

CVE-2021-3416 — QEMU: net: Infinite loop in loopback mode may lead to stack overflow CVE-2021-3631 — libvirt: Insecure sVirt label generation CVE-2021-3667 — libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API CVE-2021-3682 — QEMU: usbredir: free() call on invalid pointer in bufp_alloc() CVE-2021-33285 — ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records CVE-2021-33286 — ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string CVE-2021-33287 — ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes CVE-2021-33289 — ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section CVE-2021-35266 — ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname CVE-2021-35267 — ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections CVE-2021-35268 — ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode CVE-2021-35269 — ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a specially crafted NTFS attribute from MFT CVE-2021-39251 — ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open() CVE-2021-39252 — ntfs-3g: Out-of-bounds read in ntfs_ie_lookup() CVE-2021-39253 — ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i() CVE-2021-39254 — ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize() CVE-2021-39255 — ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an invalid attribute CVE-2021-39256 — ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name() CVE-2021-39257 — ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap CVE-2021-39258 — ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find() CVE-2021-39259 — ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an unsanitized attribute length CVE-2021-39260 — ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information() CVE-2021-39261 — ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite() CVE-2021-39262 — ntfs-3g: Out-of-bounds access in ntfs_decompress() CVE-2021-39263 — ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an unsanitized attribute

🎯 Affected products200

  • Advanced Virtualization for RHEL 8.4.0.Z
  • SLOF-0:20200717-1.gite18ddad8.module+el8.4.0+8855+a9e237a9.noarch (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • SLOF-0:20200717-1.gite18ddad8.module+el8.4.0+8855+a9e237a9.src (virt-devel:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • SLOF-0:20200717-1.gite18ddad8.module+el8.4.0+8855+a9e237a9.src (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-0:1.3.18-21.module+el8.4.0+11609+2eba841a.aarch64 (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-0:1.3.18-21.module+el8.4.0+11609+2eba841a.i686 (virt-devel:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-0:1.3.18-21.module+el8.4.0+11609+2eba841a.ppc64le (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-0:1.3.18-21.module+el8.4.0+11609+2eba841a.s390x (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-0:1.3.18-21.module+el8.4.0+11609+2eba841a.src (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-0:1.3.18-21.module+el8.4.0+11609+2eba841a.x86_64 (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-debuginfo-0:1.3.18-21.module+el8.4.0+11609+2eba841a.aarch64 (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-debuginfo-0:1.3.18-21.module+el8.4.0+11609+2eba841a.i686 (virt-devel:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-debuginfo-0:1.3.18-21.module+el8.4.0+11609+2eba841a.ppc64le (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-debuginfo-0:1.3.18-21.module+el8.4.0+11609+2eba841a.s390x (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-debuginfo-0:1.3.18-21.module+el8.4.0+11609+2eba841a.x86_64 (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-debugsource-0:1.3.18-21.module+el8.4.0+11609+2eba841a.aarch64 (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-debugsource-0:1.3.18-21.module+el8.4.0+11609+2eba841a.i686 (virt-devel:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-debugsource-0:1.3.18-21.module+el8.4.0+11609+2eba841a.ppc64le (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-debugsource-0:1.3.18-21.module+el8.4.0+11609+2eba841a.s390x (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-debugsource-0:1.3.18-21.module+el8.4.0+11609+2eba841a.x86_64 (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-devel-0:1.3.18-21.module+el8.4.0+11609+2eba841a.aarch64 (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-devel-0:1.3.18-21.module+el8.4.0+11609+2eba841a.i686 (virt-devel:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-devel-0:1.3.18-21.module+el8.4.0+11609+2eba841a.ppc64le (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-devel-0:1.3.18-21.module+el8.4.0+11609+2eba841a.s390x (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • hivex-devel-0:1.3.18-21.module+el8.4.0+11609+2eba841a.x86_64 (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • libguestfs-1:1.44.0-2.module+el8.4.0+10146+75917d2f.aarch64 (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • libguestfs-1:1.44.0-2.module+el8.4.0+10146+75917d2f.ppc64le (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • libguestfs-1:1.44.0-2.module+el8.4.0+10146+75917d2f.s390x (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • libguestfs-1:1.44.0-2.module+el8.4.0+10146+75917d2f.src (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • libguestfs-1:1.44.0-2.module+el8.4.0+10146+75917d2f.x86_64 (virt:av) as a component of Advanced Virtualization for RHEL 8.4.0.Z
  • +170 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (29)