CVE-2022-0207
Fixed in a distro release EPSS <1%
A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.
Products: ovirt vdsm, redhat virtualization, redhat virtualization_for_ibm_power_little_endian, redhat virtualization_host
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhev hypervisor 4.4 | vdsm | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-api | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-client | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-common | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-gluster | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-hook-checkips | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-hook-cpuflags | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-hook-ethtool-options | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-hook-extra-ipv4-addrs | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-hook-fcoe | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-hook-localdisk | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-hook-nestedvt | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-hook-openstacknet | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-hook-vhostmd | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-http | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-jsonrpc | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-network | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-python | 0:4.50.0.13-1.el8ev |
| Red Hat rhev hypervisor 4.4 | vdsm-yajsonrpc | 0:4.50.0.13-1.el8ev |