Skip to contentRedhat Virtualization vulnerabilities
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to...CVE-2016-2857Fix available8.4 High
- redhat data grid, jboss a-mq, openshift +12 more +14 moreDeserialization of Untrusted Data in Apache commons collectionsCVE-2015-7501Known exploitedPublic exploitFix availableEPSS 85.6%9.8 Critical
- qemu, debian linux, redhat openstack +1 more +3 moreUse-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support...CVE-2016-1568Fix available8.8 High
- qemu, debian linux, redhat enterprise linux desktop +5 more +7 moreBuffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a...CVE-2015-7512Fix available9.0 Critical
- redhat enterprise virtualizationThe Web Admin interface in Red Hat Enterprise Virtualization Manager (RHEV-M) allows local users...CVE-2015-18413.7 Low
- xen, arista eos, debian linux +20 more +22 moreThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...CVE-2015-5165Fix availableEPSS 13.3%9.3 High
- debian linux, linux kernel, qemu +16 more +18 moreThe pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...CVE-2015-3214Public exploitFix available6.9 Medium
- redhat enterprise virtualization managerRed Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the...CVE-2015-02572.1 Low
- redhat enterprise virtualization managerRed Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny...CVE-2015-02376.8 Medium
- odata4j project odata4j, redhat jboss data virtualization +1 moreXML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat...CVE-2014-01715.0 Medium
- redhat enterprise virtualizationThe rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL...CVE-2014-3561Fix available2.1 Low
- qemu, redhat enterprise linux desktop, enterprise linux eus +4 more +6 moreThe host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration,...CVE-2014-7840Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of...CVE-2014-7815Fix available5.0 Medium
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other...CVE-2014-0148Fix available5.5 Medium
- redhat enterprise virtualization managerThe oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4...CVE-2014-3573Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe VGA emulator in QEMU allows local guest users to read host memory by setting the display to a...CVE-2014-3615Fix available2.1 Low
- jboss teiid, redhat jboss data virtualization +1 moreTeiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3...CVE-2014-01704.3 Medium
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- qemu, canonical ubuntu linux, debian linux +7 more +9 moreThe VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service ...CVE-2015-1779Fix available8.6 High
- redhat enterprise virtualizationThe oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots...CVE-2014-3559Fix available3.5 Low
- redhat libvirt, opensuse, redhat enterprise linux +1 more +3 morelibvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows...CVE-2014-5177Fix available1.2 Low
- redhat enterprise virtualizationThe REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3...CVE-2014-3485Fix available4.0 Medium
- gnu libtasn1, debian linux, gnu gnutls +11 more +13 moreThe (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows...CVE-2014-3469Fix available5.0 Medium
- gnu libtasn1, debian linux, f5 arx firmware +12 more +14 moreThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a...CVE-2014-3468Fix available7.5 High
- gnu gnutls, libtasn1, debian linux +12 more +14 moreMultiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in...CVE-2014-3467Fix available5.0 Medium
- redhat libvirt, opensuse, redhat enterprise linux +1 more +3 morelibvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read...CVE-2014-0179Fix available1.9 Low
- openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 moreThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...CVE-2014-0160In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- qemu, fedoraproject fedora, redhat enterprise linux desktop +7 more +9 moreQemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW...CVE-2014-0147Fix available6.2 Medium
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are...CVE-2014-0144Fix available8.6 High
- qemu, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreThe virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers...CVE-2013-4535Fix available8.8 High
- redhat enterprise virtualization managerThe remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a...CVE-2013-6434Fix available4.3 Medium
- redhat enterprise virtualizationUnquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise...CVE-2013-21527.2 High
- redhat enterprise virtualizationUnquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2...CVE-2013-21517.2 High
- redhat manageiq enterprise virtualization manager, cloudforms management engine +1 moreSQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management...CVE-2013-2050EPSS 15.7%7.5 High
- redhat enterprise virtualization hypervisorlibspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev...CVE-2010-04307.4 High
- spice project spice, redhat enterprise linux, enterprise virtualization +2 moreStack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0...CVE-2013-4282Fix available5.0 Medium
- qemu, canonical ubuntu linux, opensuse +4 more +6 moreBuffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has...CVE-2013-4344Fix available7.2 High
- redhat enterprise virtualizationCross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet...CVE-2013-4181Fix available4.3 Medium
- gnu glibc, apple mac os x, debian linux +14 more +16 moreHeap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x...CVE-2015-0235Public exploitFix availableEPSS 94.6%10.0 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and...CVE-2012-3406Fix available6.8 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and...CVE-2012-3405Fix available5.0 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and...CVE-2012-3404Fix available5.0 Medium
- redhat enterprise virtualizationUnquoted Windows search path vulnerability in the Red Hat Enterprise Virtualization Application...CVE-2013-2176Fix available7.2 High
- redhat enterprise virtualizationVDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the...CVE-2013-4236Fix available2.7 Low
- redhat enterprise virtualizationVDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the...CVE-2013-0167Fix available2.7 Low
- redhat enterprise virtualization managerRed Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions...CVE-2013-2144Fix available5.0 Medium
- redhat enterprise virtualization managerThe MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does...CVE-2013-01684.0 Medium
- redhat enterprise virtualization managerThe domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager ...CVE-2012-61152.1 Low
- palemoon pale moon, redhat enterprise linux, enterprise virtualization +2 moreStack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other...CVE-2013-1591Fix available9.8 Critical
- Show moreLoading…