Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/redhat-virtualization-host@4.3.22-20220330.1?arch=el7_9
purl pkg:rpm/redhat/redhat-virtualization-host@4.3.22-20220330.1?arch=el7_9
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (12)
Vulnerability Summary Fixed by
VCID-45du-dgkd-p3b8
Aliases:
CVE-2021-4155
kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL There are no reported fixed by versions.
VCID-cy2n-zexk-jyda
Aliases:
CVE-2022-25315
Multiple vulnerabilities have been discovered in Expat, the worst of which could result in arbitrary code execution. There are no reported fixed by versions.
VCID-gsbn-6t86-7kf9
Aliases:
CVE-2022-0778
GHSA-x3mh-jvjw-3xwx
Loop with Unreachable Exit Condition ('Infinite Loop') The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters There are no reported fixed by versions.
VCID-m1fw-z29h-ubdn
Aliases:
CVE-2021-4028
kernel: use-after-free in RDMA listen() There are no reported fixed by versions.
VCID-mddr-7zar-6kfn
Aliases:
CVE-2022-25236
Multiple vulnerabilities have been discovered in Expat, the worst of which could result in arbitrary code execution. There are no reported fixed by versions.
VCID-ms42-54h5-2kfa
Aliases:
CVE-2022-0330
kernel: possible privileges escalation due to missing TLB flush There are no reported fixed by versions.
VCID-nw7y-2xct-8fa5
Aliases:
CVE-2022-25235
Multiple vulnerabilities have been discovered in Expat, the worst of which could result in arbitrary code execution. There are no reported fixed by versions.
VCID-tqsm-2e4k-aycp
Aliases:
CVE-2022-22942
kernel: failing usercopy allows for use-after-free exploitation There are no reported fixed by versions.
VCID-txgc-kd7n-ekc6
Aliases:
CVE-2021-0920
kernel: Use After Free in unix_gc() which could result in a local privilege escalation There are no reported fixed by versions.
VCID-u4gb-1hyn-m7g4
Aliases:
CVE-2021-4083
kernel: fget: check that the fd still exists after getting a ref to it There are no reported fixed by versions.
VCID-ukce-7qpu-c7cm
Aliases:
CVE-2022-24407
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. There are no reported fixed by versions.
VCID-y5u5-dgk3-u3da
Aliases:
CVE-2021-45417
A vulnerability has been found in AIDE which can lead to root privilege escalation. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:01:47.010084+00:00 RedHat Importer Affected by VCID-txgc-kd7n-ekc6 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-0920.json 38.0.0
2026-04-01T14:01:19.399632+00:00 RedHat Importer Affected by VCID-m1fw-z29h-ubdn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-4028.json 38.0.0
2026-04-01T14:00:59.073141+00:00 RedHat Importer Affected by VCID-u4gb-1hyn-m7g4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-4083.json 38.0.0
2026-04-01T14:00:34.715643+00:00 RedHat Importer Affected by VCID-45du-dgkd-p3b8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-4155.json 38.0.0
2026-04-01T13:59:51.342086+00:00 RedHat Importer Affected by VCID-y5u5-dgk3-u3da https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-45417.json 38.0.0
2026-04-01T13:59:49.595415+00:00 RedHat Importer Affected by VCID-ms42-54h5-2kfa https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0330.json 38.0.0
2026-04-01T13:59:48.013799+00:00 RedHat Importer Affected by VCID-tqsm-2e4k-aycp https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-22942.json 38.0.0
2026-04-01T13:59:35.308505+00:00 RedHat Importer Affected by VCID-mddr-7zar-6kfn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-25236.json 38.0.0
2026-04-01T13:59:34.080614+00:00 RedHat Importer Affected by VCID-nw7y-2xct-8fa5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-25235.json 38.0.0
2026-04-01T13:59:33.220782+00:00 RedHat Importer Affected by VCID-cy2n-zexk-jyda https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-25315.json 38.0.0
2026-04-01T13:59:30.845365+00:00 RedHat Importer Affected by VCID-ukce-7qpu-c7cm https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-24407.json 38.0.0
2026-04-01T13:59:11.687195+00:00 RedHat Importer Affected by VCID-gsbn-6t86-7kf9 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0778.json 38.0.0