Redhat Enterprise Virtualization vulnerabilities

• redhat enterprise virtualization hypervisor (aka rhev-h), enterprise virtualization, enterprise virtualization hypervisor +2 more VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2... CVE-2015-5201 Fix available 7.5 HighFebruary 25, 2020
• python pyxml, redhat enterprise linux, enterprise virtualization hypervisor +2 more PyXML: Hash table collisions CPU usage Denial of Service CVE-2012-0877 7.5 HighNovember 22, 2019
• redhat vdsclient, vdsm and vdsclient and vdsclient, redhat enterprise virtualization +1 more +3 more vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate... CVE-2014-8167 5.9 MediumNovember 13, 2019
• redhat enterprise virtualization manager In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client... CVE-2009-3552 3.1 LowNovember 9, 2019
• [unknown] vdsm, redhat enterprise virtualization, storage +1 more +3 more Insecure temporary file vulnerability in RedHat vsdm 4.9.6. CVE-2013-4280 5.5 MediumNovember 4, 2019
• manageiq evm evm, red hat cloudforms 3.0, redhat cloudforms +1 more +3 more Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to... CVE-2013-0186 6.1 MediumNovember 1, 2019
• debian linux, redhat enterprise linux server, enterprise linux virtualization +3 more +5 more The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the... CVE-2018-14652 Fix available 6.5 MediumOctober 31, 2018
• red hat ovirt-engine-extension-aaa-jdbc, redhat enterprise virtualization +1 more When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to... CVE-2017-2614 Fix available 6.8 MediumJuly 27, 2018
• ovirt, [unknown] ovirt-engine-setup, redhat enterprise virtualization manager +2 more ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log... CVE-2018-1072 5.0 MediumJune 26, 2018
• [unknown] ovirt-ansible-roles, redhat enterprise virtualization +1 more ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive,... CVE-2018-1117 Fix available 5.0 MediumJune 19, 2018
• fedora dhcp, fedoraproject fedora, redhat enterprise linux +5 more +7 more DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a... CVE-2018-1111 Public exploitFix available EPSS 97.9% 7.5 HighMay 17, 2018
• debian linux, freebsd, xen +8 more +10 more A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software... CVE-2018-8897 Public exploitFix available EPSS 18.5% 7.8 HighMay 8, 2018
• redhat manageiq enterprise virtualization manager Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager ... CVE-2013-0185 8.8 HighMay 1, 2018
• ovirt, unspecified ovirt-engine, redhat enterprise virtualization +2 more ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to... CVE-2018-1074 Fix available 7.7 HighApril 26, 2018
• redhat enterprise virtualization manager redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before... CVE-2015-7544 Fix available 9.1 CriticalSeptember 25, 2017
• redhat enterprise virtualization manager Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to... CVE-2015-5293 5.9 MediumAugust 24, 2017
• redhat enterprise virtualization oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine... CVE-2016-6310 5.5 MediumAugust 22, 2017
• libffi project libffi, debian linux, oracle peopletools +3 more +5 more libffi requests an executable stack allowing attackers to more easily trigger arbitrary code... CVE-2017-1000376 Fix available 7.0 HighJune 19, 2017
• redhat enterprise virtualization ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for... CVE-2016-6338 Fix available 6.8 MediumApril 20, 2017
• redhat enterprise virtualization Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys... CVE-2016-4443 Fix available 5.5 MediumDecember 14, 2016
• redhat enterprise virtualization The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0... CVE-2016-5432 Fix available 3.3 LowOctober 3, 2016
• redhat enterprise virtualization The Web Admin interface in Red Hat Enterprise Virtualization Manager (RHEV-M) allows local users... CVE-2015-1841 3.7 LowSeptember 8, 2015
• redhat enterprise virtualization manager Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the... CVE-2015-0257 2.1 LowMay 1, 2015
• redhat enterprise virtualization manager Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny... CVE-2015-0237 6.8 MediumMay 1, 2015
• redhat enterprise virtualization The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL... CVE-2014-3561 Fix available 2.1 LowDecember 5, 2014
• redhat enterprise virtualization manager The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4... CVE-2014-3573 Fix available 6.5 MediumOctober 18, 2014
• redhat enterprise virtualization The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots... CVE-2014-3559 Fix available 3.5 LowAugust 6, 2014
• redhat libvirt, opensuse, redhat enterprise linux +1 more +3 more libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows... CVE-2014-5177 Fix available 1.2 LowAugust 3, 2014
• redhat enterprise virtualization The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3... CVE-2014-3485 Fix available 4.0 MediumJuly 11, 2014
• redhat libvirt, opensuse, redhat enterprise linux +1 more +3 more libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read... CVE-2014-0179 Fix available 1.9 LowMay 29, 2014
• redhat enterprise virtualization manager The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a... CVE-2013-6434 Fix available 4.3 MediumJanuary 24, 2014
• redhat enterprise virtualization Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise... CVE-2013-2152 7.2 HighJanuary 21, 2014
• redhat enterprise virtualization Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2... CVE-2013-2151 7.2 HighJanuary 21, 2014
• redhat manageiq enterprise virtualization manager, cloudforms management engine +1 more SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management... CVE-2013-2050 EPSS 15.7% 7.5 HighJanuary 11, 2014
• redhat enterprise virtualization hypervisor libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev... CVE-2010-0430 7.4 HighDecember 27, 2013
• spice project spice, redhat enterprise linux, enterprise virtualization +2 more Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0... CVE-2013-4282 Fix available 5.0 MediumNovember 2, 2013
• redhat enterprise virtualization Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet... CVE-2013-4181 Fix available 4.3 MediumSeptember 16, 2013
• gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 more The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and... CVE-2012-3406 Fix available 6.8 MediumSeptember 13, 2013
• gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 more The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and... CVE-2012-3405 Fix available 5.0 MediumSeptember 13, 2013
• gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 more The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and... CVE-2012-3404 Fix available 5.0 MediumSeptember 13, 2013
• redhat enterprise virtualization Unquoted Windows search path vulnerability in the Red Hat Enterprise Virtualization Application... CVE-2013-2176 Fix available 7.2 HighAugust 28, 2013
• redhat enterprise virtualization VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the... CVE-2013-4236 Fix available 2.7 LowAugust 19, 2013
• redhat enterprise virtualization VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the... CVE-2013-0167 Fix available 2.7 LowAugust 19, 2013
• redhat enterprise virtualization manager Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions... CVE-2013-2144 Fix available 5.0 MediumJuly 3, 2013
• redhat enterprise virtualization manager The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does... CVE-2013-0168 4.0 MediumMarch 12, 2013
• redhat enterprise virtualization manager The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager ... CVE-2012-6115 2.1 LowMarch 12, 2013
• palemoon pale moon, redhat enterprise linux, enterprise virtualization +2 more Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other... CVE-2013-1591 Fix available 9.8 CriticalJanuary 31, 2013
• redhat enterprise virtualization manager Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage... CVE-2012-5516 2.1 LowJanuary 4, 2013
• redhat enterprise virtualization manager The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly... CVE-2012-2696 2.7 LowJanuary 4, 2013
• redhat enterprise virtualization manager The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a... CVE-2012-0861 Fix available 6.8 MediumJanuary 4, 2013
• Show olderLoading…