Redhat Virtualization Host vulnerabilities

• fedoraproject sssd, fedora, red hat enterprise linux 6 +29 more +31 more Sssd: race condition during authorization leads to gpo policies functioning inconsistently CVE-2023-3758 Fix available 7.1 HighApril 18, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 more Kernel: null pointer dereference in __nvmet_req_complete CVE-2023-6536 Fix available 6.5 MediumFebruary 7, 2024
• linux kernel, red hat enterprise linux 6, enterprise linux 7 +22 more +24 more Kernel: null pointer dereference in nvmet_tcp_execute_request CVE-2023-6535 Fix available 6.5 MediumFebruary 7, 2024
• debian linux, linux kernel, red hat enterprise linux 6 +23 more +25 more Kernel: null pointer dereference in nvmet_tcp_build_iovec CVE-2023-6356 Fix available 6.5 MediumFebruary 7, 2024
• gnu glibc, c library, canonical ubuntu linux +48 more +50 more Glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 In KEVPublic exploitFix available EPSS 63.8% 7.8 HighOctober 3, 2023
• [unknown] vdsm, redhat virtualization, virtualization for ibm power little endian +1 more +3 more A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that... CVE-2022-0207 Fix available 4.7 MediumAugust 26, 2022
• debian linux, linux kernel, fedoraproject fedora +27 more +29 more A flaw use after free in the Linux kernel FUSE filesystem was found in the way user triggers... CVE-2022-1011 Public exploitFix available 7.8 HighMarch 18, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +26 more +28 more Important: kernel security, bug fix, and enhancement update CVE-2022-0847 In KEVPublic exploitFix available EPSS 92.8% 7.8 HighMarch 7, 2022
• debian linux, linux kernel, fedoraproject fedora +20 more +22 more A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in... CVE-2022-0516 Fix available 7.8 HighMarch 1, 2022
• linux kernel, ovirt node, fedoraproject fedora +27 more +29 more Important: kernel security, bug fix, and enhancement update CVE-2022-0435 Public exploitFix available EPSS 67.8% 8.8 HighFebruary 10, 2022
• samba, debian linux, redhat enterprise linux +4 more +6 more A flaw was found in the way Samba handled file/directory metadata. This flaw allows an... CVE-2021-20316 Fix available 6.8 MediumFebruary 8, 2022
• debian linux, linux kernel, canonical ubuntu linux +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2022-0492 In KEVPublic exploitFix available 7.8 HighFebruary 8, 2022
• samba, canonical ubuntu linux, debian linux +20 more +22 more The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced... CVE-2021-44142 Public exploitFix available EPSS 73.6% 8.8 HighJanuary 31, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 more Important: kernel security, bug fix, and enhancement update CVE-2022-0330 Fix available 7.8 HighJanuary 26, 2022
• advanced intrusion detection environment project intrusion detection environment, canonical ubuntu linux, debian linux +4 more +6 more AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such... CVE-2021-45417 Fix available 7.8 HighJanuary 20, 2022
• samba, canonical ubuntu linux, debian linux +22 more +24 more A flaw was found in the way Samba maps domain users to local users. An authenticated attacker... CVE-2020-25717 Fix available 8.1 HighNovember 9, 2021
• samba, canonical ubuntu linux, debian linux +21 more +23 more A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this... CVE-2016-2124 Fix available 5.9 MediumNovember 9, 2021
• red hat ansible, redhat ansible engine, ansible automation platform early access +7 more +9 more Ansible discloses sensitive information in traceback error message CVE-2021-3620 Fix available 5.5 MediumOctober 23, 2021
• debian linux, linux kernel, fedoraproject fedora +20 more +22 more A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with... CVE-2021-3669 Fix available 5.5 MediumOctober 12, 2021
• debian linux, linux kernel, fedoraproject fedora +16 more +18 more A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls... CVE-2021-3752 Fix available 7.1 HighSeptember 17, 2021
• debian linux, linux kernel, fedoraproject fedora +20 more +22 more Important: kernel security, bug fix, and enhancement update CVE-2021-3744 Fix available 5.5 MediumSeptember 15, 2021
• kernel kvm, linux kernel, fedoraproject fedora +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2021-3656 Public exploitFix available 8.8 HighAugust 16, 2021
• fedoraproject sssd, fedora, redhat enterprise linux +5 more +7 more A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via... CVE-2021-3621 Fix available 8.8 HighAugust 16, 2021
• linux kernel, fedoraproject fedora, redhat codeready linux builder +12 more +14 more A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking... CVE-2021-3659 Fix available 5.5 MediumAugust 10, 2021
• linux kernel, netapp h300e firmware, h300s firmware +29 more +31 more .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker... CVE-2021-3609 Fix available 7.0 HighJune 21, 2021
• polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 more It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests... CVE-2021-3560 In KEVPublic exploitFix available EPSS 22.2% 7.8 HighJune 3, 2021
• linux kernel, fedoraproject fedora, netapp cloud backup +16 more +18 more A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the... CVE-2021-3501 Fix available 7.1 HighMay 5, 2021
• debian linux, linux kernel, canonical ubuntu linux +8 more +10 more CVE-2020-10711 does not affect BellSoft software CVE-2020-10711 Fix available 5.9 MediumMay 12, 2020
• debian linux, linux kernel, canonical ubuntu linux +25 more +27 more An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way... CVE-2019-14821 Fix available 7.5 HighSeptember 19, 2019
• debian linux, linux kernel, canonical ubuntu linux +31 more +33 more A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's... CVE-2019-14835 Fix available 7.2 HighSeptember 17, 2019
• bluetooth br/edr, apple iphone os, mac os x +145 more +147 more Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation CVE-2019-9506 Public exploitFix available 7.6 HighAugust 13, 2019
• microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1703 +36 more +38 more Windows Kernel Information Disclosure Vulnerability CVE-2019-1125 Public exploitFix available 5.6 MediumAugust 6, 2019
• libvirt, canonical ubuntu linux, redhat enterprise linux +2 more +4 more It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients... CVE-2019-10161 Fix available 8.8 HighJune 20, 2019
• linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +18 more +20 more Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This... CVE-2019-11479 Fix available EPSS 91.3% 5.3 MediumJune 17, 2019
• red hat undertow, netapp active iq unified manager, redhat jboss data grid +3 more +5 more Credential exposure through log files in Undertow CVE-2019-3888 Fix available 5.3 MediumJune 12, 2019
• openssl, canonical ubuntu linux, debian linux +79 more +81 more 0-byte record padding oracle CVE-2019-1559 Fix available EPSS 17.1% 5.9 MediumFebruary 26, 2019
• rsyslog, debian linux, redhat enterprise linux desktop +10 more +12 more A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could... CVE-2018-16881 Fix available 5.3 MediumJanuary 25, 2019
• debian linux, linux kernel, canonical ubuntu linux +13 more +15 more A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux... CVE-2019-3460 Fix available 6.5 MediumJanuary 14, 2019
• linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 more The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for... CVE-2018-18397 Fix available 5.5 MediumDecember 12, 2018
• [unknown] glusterfs, debian linux, redhat enterprise linux server +2 more +4 more A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated... CVE-2018-14660 Fix available 6.5 MediumNovember 1, 2018
• gluster glusterfs, debian linux, redhat enterprise linux server +3 more +5 more It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8... CVE-2018-14661 Fix available 6.5 MediumOctober 31, 2018
• redhat gluster file system, debian linux, redhat enterprise linux server +3 more +5 more The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service... CVE-2018-14659 Fix available 6.5 MediumOctober 31, 2018
• debian linux, redhat enterprise linux server, enterprise linux virtualization +4 more +6 more The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index'... CVE-2018-14654 Fix available 5.4 MediumOctober 31, 2018
• debian linux, redhat enterprise linux server, enterprise linux virtualization +3 more +5 more The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the... CVE-2018-14652 Fix available 6.5 MediumOctober 31, 2018
• linux kernel, redhat enterprise linux desktop, enterprise linux server +6 more +8 more In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between... CVE-2018-18559 Fix available 8.1 HighOctober 22, 2018
• paramiko, canonical ubuntu linux, debian linux +8 more +10 more Paramiko Authentication Bypass vulnerability CVE-2018-1000805 Fix available 8.8 HighOctober 8, 2018
• red hat undertow, redhat virtualization, virtualization host +2 more Uncontrolled Resource Consumption in Undertow CVE-2018-1114 Fix available 6.5 MediumSeptember 11, 2018
• gluster glusterfs, debian linux, opensuse leap +4 more +6 more A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated... CVE-2018-10930 Fix available 6.5 MediumSeptember 4, 2018
• gluster glusterfs, debian linux, opensuse leap +2 more +4 more A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated... CVE-2018-10929 Fix available 8.8 HighSeptember 4, 2018
• gluster glusterfs, debian linux, opensuse leap +4 more +6 more A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink... CVE-2018-10928 Fix available 8.8 HighSeptember 4, 2018
• Show olderLoading…