Rocky Linux: CVE-2020-10703: virt-rhel-and-virt-devel-rhel (RLSA-2020-4676)
Description
A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its target path. In more detail, this flaw affects storage pools created without a target path such as network-based pools like gluster and RBD. Unprivileged users with a read-only connection could abuse this flaw to crash the libvirt daemon, resulting in a potential denial of service.
Solution(s)
- rocky-upgrade-hivex
- rocky-upgrade-hivex-debuginfo
- rocky-upgrade-hivex-debugsource
- rocky-upgrade-hivex-devel
- rocky-upgrade-libguestfs-winsupport
- rocky-upgrade-libiscsi
- rocky-upgrade-libiscsi-debuginfo
- rocky-upgrade-libiscsi-debugsource
- rocky-upgrade-libiscsi-devel
- rocky-upgrade-libiscsi-utils
- rocky-upgrade-libiscsi-utils-debuginfo
- rocky-upgrade-libnbd
- rocky-upgrade-libnbd-debuginfo
- rocky-upgrade-libnbd-debugsource
- rocky-upgrade-libnbd-devel
- rocky-upgrade-libvirt-dbus
- rocky-upgrade-libvirt-dbus-debuginfo
- rocky-upgrade-libvirt-dbus-debugsource
- rocky-upgrade-libvirt-python-debugsource
- rocky-upgrade-nbdfuse
- rocky-upgrade-nbdfuse-debuginfo
- rocky-upgrade-nbdkit
- rocky-upgrade-nbdkit-basic-filters
- rocky-upgrade-nbdkit-basic-filters-debuginfo
- rocky-upgrade-nbdkit-basic-plugins
- rocky-upgrade-nbdkit-basic-plugins-debuginfo
- rocky-upgrade-nbdkit-curl-plugin
- rocky-upgrade-nbdkit-curl-plugin-debuginfo
- rocky-upgrade-nbdkit-debuginfo
- rocky-upgrade-nbdkit-debugsource
- rocky-upgrade-nbdkit-devel
- rocky-upgrade-nbdkit-example-plugins
- rocky-upgrade-nbdkit-example-plugins-debuginfo
- rocky-upgrade-nbdkit-gzip-plugin
- rocky-upgrade-nbdkit-gzip-plugin-debuginfo
- rocky-upgrade-nbdkit-linuxdisk-plugin
- rocky-upgrade-nbdkit-linuxdisk-plugin-debuginfo
- rocky-upgrade-nbdkit-python-plugin
- rocky-upgrade-nbdkit-python-plugin-debuginfo
- rocky-upgrade-nbdkit-server
- rocky-upgrade-nbdkit-server-debuginfo
- rocky-upgrade-nbdkit-ssh-plugin
- rocky-upgrade-nbdkit-ssh-plugin-debuginfo
- rocky-upgrade-nbdkit-vddk-plugin
- rocky-upgrade-nbdkit-vddk-plugin-debuginfo
- rocky-upgrade-nbdkit-xz-filter
- rocky-upgrade-nbdkit-xz-filter-debuginfo
- rocky-upgrade-netcf
- rocky-upgrade-netcf-debuginfo
- rocky-upgrade-netcf-debugsource
- rocky-upgrade-netcf-devel
- rocky-upgrade-netcf-libs
- rocky-upgrade-netcf-libs-debuginfo
- rocky-upgrade-ocaml-hivex
- rocky-upgrade-ocaml-hivex-debuginfo
- rocky-upgrade-ocaml-hivex-devel
- rocky-upgrade-ocaml-libnbd
- rocky-upgrade-ocaml-libnbd-debuginfo
- rocky-upgrade-ocaml-libnbd-devel
- rocky-upgrade-perl-hivex
- rocky-upgrade-perl-hivex-debuginfo
- rocky-upgrade-perl-sys-virt
- rocky-upgrade-perl-sys-virt-debuginfo
- rocky-upgrade-perl-sys-virt-debugsource
- rocky-upgrade-python3-hivex
- rocky-upgrade-python3-hivex-debuginfo
- rocky-upgrade-python3-libnbd
- rocky-upgrade-python3-libnbd-debuginfo
- rocky-upgrade-python3-libvirt
- rocky-upgrade-python3-libvirt-debuginfo
- rocky-upgrade-ruby-hivex
- rocky-upgrade-ruby-hivex-debuginfo
- rocky-upgrade-seabios
- rocky-upgrade-sgabios
- rocky-upgrade-supermin
- rocky-upgrade-supermin-debuginfo
- rocky-upgrade-supermin-debugsource
- rocky-upgrade-supermin-devel
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center