Skip to contentRedhat Virtualization vulnerabilities
- ovirt, unspecified ovirt-engine, redhat enterprise virtualization +2 moreovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to...CVE-2018-1074Fix available7.7 High
- linux kernel, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreThe xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16...CVE-2018-10322Fix available5.5 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +7 more +9 moreThe DPDK vhost-user interface does not check to verify that all the requested guest physical...CVE-2018-1059Fix available6.1 Medium
- redhat gluster storage, debian linux, opensuse leap +4 more +6 moreA privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client...CVE-2018-1088Public exploitFix available8.1 High
- red hat undertow, redhat jboss enterprise application platform, jboss fuse +1 more +3 moreIncorrect Authorization in UndertowCVE-2017-12196Fix available4.8 Medium
- qos slf4j, oracle goldengate application adapters, goldengate stream analytics +10 more +12 moreImproper Access Control in SLF4JCVE-2018-8088Fix availableEPSS 14.7%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for...CVE-2018-1068Fix available6.7 Medium
- paramiko, debian linux, redhat ansible engine +8 more +10 moreParamiko not properly checking authentication before processing other requestsCVE-2018-7750Public exploitFix availableEPSS 27.1%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local...CVE-2018-7740Fix available5.5 Medium
- debian linux, linux kernel, redhat enterprise linux desktop +3 more +5 moreIn the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an...CVE-2018-5803Public exploitFix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow...CVE-2018-6927Fix available7.8 High
- redhat libvirt, canonical ubuntu linux, debian linux +4 more +6 moreutil/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which...CVE-2018-6764Fix available7.8 High
- gnu glibc, netapp cloud backup, data ontap edge +12 more +14 moreAn integer overflow in the implementation of the posix_memalign in memalign functions in the GNU...CVE-2018-6485Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows...CVE-2018-5750Fix available5.5 Medium
- fasterxml jackson-databind, debian linux, netapp e-series santricity os controller +6 more +8 moreDeserialization of Untrusted Data in jackson-databindCVE-2018-5968Fix available8.1 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreIn the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization,...CVE-2018-5344Fix available7.8 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreIn glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be...CVE-2018-1000001Public exploitFix availableEPSS 13.4%7.8 High
- redhat hibernate validator, hibernate hibernate-validator, redhat jboss enterprise application platform +4 more +6 morePrivilege Escalation in Hibernate ValidatorCVE-2017-7536Fix available7.0 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic...CVE-2017-1000407Fix available7.4 High
- debian linux, linux kernel, redhat enterprise linux desktop +6 more +8 moreThe Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing...CVE-2017-1000410Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreThe Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a...CVE-2017-15119Fix available5.8 Medium
- redhat enterprise virtualization managerredhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before...CVE-2015-7544Fix available9.1 Critical
- redhat enterprise virtualization managerRed Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to...CVE-2015-52935.9 Medium
- redhat enterprise virtualizationoVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine...CVE-2016-63105.5 Medium
- fasterxml jackson-databind, debian linux, netapp oncommand balance +18 more +20 morejackson-databind is vulnerable to a deserialization flawCVE-2017-7525Public exploitFix availableEPSS 37.7%9.8 Critical
- qemu, debian linux, redhat enterprise linux desktop +7 more +9 moreqemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to...CVE-2017-10664Fix available7.5 High
- libffi project libffi, debian linux, oracle peopletools +3 more +5 morelibffi requests an executable stack allowing attackers to more easily trigger arbitrary code...CVE-2017-1000376Fix available7.0 High
- [unknown] ansible, canonical ubuntu linux, debian linux +7 more +9 moreAnsible fails to properly mark lookup-plugin results as unsafeCVE-2017-7481Fix available5.3 Medium
- red hat ansible, redhat ansible engine, virtualization +2 moreImproper Input Validation in ansibleCVE-2016-8647Fix available2.2 Low
- debian linux, openvswitch, redhat openstack +2 more +4 moreIn Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message,...CVE-2017-9214Fix available9.8 Critical
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreHeap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and...CVE-2017-7980Fix available7.8 High
- redhat enterprise virtualizationovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for...CVE-2016-6338Fix available6.8 Medium
- qemu, debian linux, redhat openstack +1 more +3 moreThe xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest...CVE-2017-5973Fix available5.5 Medium
- qemu, debian linux, redhat openstack +1 more +3 moreQuick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a...CVE-2016-9921Fix available6.5 Medium
- qemu, debian linux, redhat openstack +1 more +3 moreQuick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage...CVE-2016-9911Fix available6.5 Medium
- qemu, debian linux, redhat openstack +1 more +3 moreQuick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory...CVE-2016-9907Fix available6.5 Medium
- redhat enterprise virtualizationRed Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys...CVE-2016-4443Fix available5.5 Medium
- qemu, opensuse leap, redhat openstack +1 more +3 moreThe virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local...CVE-2016-7422Fix available6.0 Medium
- qemu, debian linux, opensuse leap +2 more +4 moreThe rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local...CVE-2016-8910Fix available6.0 Medium
- qemu, debian linux, opensuse leap +2 more +4 moreThe intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local...CVE-2016-8909Fix available6.0 Medium
- qemu, debian linux, opensuse leap +2 more +4 moreThe serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows...CVE-2016-8669Fix available6.0 Medium
- qemu, debian linux, opensuse leap +2 more +4 moreThe xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest...CVE-2016-8576Fix available6.0 Medium
- redhat enterprise virtualizationThe ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0...CVE-2016-5432Fix available3.3 Low
- qemu, opensuse leap, redhat openstack +1 more +3 moreMemory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when...CVE-2016-7466Fix available6.0 Medium
- qemu, debian linux, redhat openstack +1 more +3 moreInteger overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick...CVE-2016-6888Fix available4.4 Medium
- qemu, debian linux, redhat virtualization +2 moreThe vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator)...CVE-2016-6835Fix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to...CVE-2016-5403Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreHeap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local...CVE-2016-5126Fix available7.8 High
- qemu, canonical ubuntu linux, citrix xenserver +11 more +13 moreThe VGA module in QEMU improperly performs bounds checking on banked access to video memory,...CVE-2016-3710Fix available8.8 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32...CVE-2016-4020Fix available6.5 Medium
- Show moreLoading…