Skip to contentRedhat Virtualization Host vulnerabilities
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreA flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated...CVE-2018-10927Fix available7.1 High
- gluster glusterfs, debian linux, opensuse leap +3 more +5 moreA flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An...CVE-2018-10926Fix available8.1 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that the "mknod" call derived from mknod(2) can create files pointing to devices on...CVE-2018-10923Fix available7.6 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster...CVE-2018-10914Fix available5.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreAn information disclosure vulnerability was discovered in glusterfs server. An attacker could...CVE-2018-10913Fix available3.5 Low
- gluster glusterfs, debian linux, opensuse leap +5 more +7 moreA flaw was found in the way dic_unserialize function of glusterfs does not handle negative key...CVE-2018-10911Fix available6.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to...CVE-2018-10907Fix available8.8 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats...CVE-2018-10904Fix available8.8 High
- spice project spice, [unknown] spice:, canonical ubuntu linux +9 more +11 moreA vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for...CVE-2018-10873Fix available8.3 High
- samba, canonical ubuntu linux, debian linux +5 more +7 moreA heap-buffer overflow was found in the way samba clients processed extra long filename in a...CVE-2018-10858Fix available4.3 Medium
- [unknown] ansible, canonical ubuntu linux, debian linux +8 more +10 moreAnsible Arbitrary Code ExecutionCVE-2018-10875Fix available7.8 High
- [unknown] ansible, redhat ansible engine, openstack +2 more +4 moreAnsible Improper Input Validation vulnerabilityCVE-2018-10874Fix available7.8 High
- [unknown] ovirt-engine, redhat virtualization, virtualization host +2 moreThe web console login form in ovirt-engine before version 4.2.3 returned different errors for non...CVE-2018-10735.3 Medium
- debian linux, google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +4 more +6 moreIn the function wmi_set_ie(), the length validation code does not handle unsigned integer...CVE-2018-5848Fix available7.8 High
- [unknown] undertow, redhat jboss enterprise application platform, virtualization host +2 moreImproper Neutralization of CRLF Sequences in HTTP Headers in UndertowCVE-2018-1067Fix available5.4 Medium
- gnu glibc, canonical ubuntu linux, netapp data ontap edge +7 more +9 moreAn AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or...CVE-2018-11237Fix available7.8 High
- gnu glibc, netapp data ontap edge, element software management +6 more +8 morestdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing...CVE-2018-11236Fix available9.8 Critical
- [unknown] kernel, debian linux, canonical ubuntu linux +4 more +6 moreA flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file...CVE-2018-1120Public exploitFix available2.8 Low
- fedora dhcp, fedoraproject fedora, redhat enterprise linux +5 more +7 moreDHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a...CVE-2018-1111Public exploitFix availableEPSS 97.9%7.5 High
- debian linux, kernel vhost, linux kernel +5 more +7 moreLinux kernel vhost since version 4.8 does not properly initialize memory in messages passed...CVE-2018-1118Fix available2.3 Low
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreThe do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local...CVE-2018-10675Fix available7.8 High
- google guava, oracle banking payments, communications ip service activator +14 more +16 moreDenial of Service in Google GuavaCVE-2018-10237Fix available5.9 Medium
- linux kernel, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreThe xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16...CVE-2018-10322Fix available5.5 Medium
- redhat gluster storage, debian linux, opensuse leap +4 more +6 moreA privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client...CVE-2018-1088Public exploitFix available8.1 High
- qos slf4j, oracle goldengate application adapters, goldengate stream analytics +10 more +12 moreImproper Access Control in SLF4JCVE-2018-8088Fix availableEPSS 14.7%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for...CVE-2018-1068Fix available6.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local...CVE-2018-7740Fix available5.5 Medium
- debian linux, linux kernel, redhat enterprise linux desktop +3 more +5 moreIn the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an...CVE-2018-5803Public exploitFix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow...CVE-2018-6927Fix available7.8 High
- gnu glibc, netapp cloud backup, data ontap edge +12 more +14 moreAn integer overflow in the implementation of the posix_memalign in memalign functions in the GNU...CVE-2018-6485Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows...CVE-2018-5750Fix available5.5 Medium
- fasterxml jackson-databind, debian linux, netapp e-series santricity os controller +6 more +8 moreDeserialization of Untrusted Data in jackson-databindCVE-2018-5968Fix available8.1 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreIn glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be...CVE-2018-1000001Public exploitFix availableEPSS 13.4%7.8 High
- redhat hibernate validator, hibernate hibernate-validator, redhat jboss enterprise application platform +4 more +6 morePrivilege Escalation in Hibernate ValidatorCVE-2017-7536Fix available7.0 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic...CVE-2017-1000407Fix available7.4 High
- debian linux, linux kernel, redhat enterprise linux desktop +6 more +8 moreThe Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing...CVE-2017-1000410Fix available7.5 High
- fasterxml jackson-databind, debian linux, netapp oncommand balance +18 more +20 morejackson-databind is vulnerable to a deserialization flawCVE-2017-7525Public exploitFix availableEPSS 37.7%9.8 Critical