Rhev Hypervisor (Redhat) - vulnerabilities (CVEs)

34 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-09-26. Vendor: Redhat.

CVEs of Rhev Hypervisor

CVE-2024-7259 - CVSS 4.9 (medium), 2024-09-26: A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may be able to use browser developer tools…
CVE-2023-3758 - CVSS 7.1 (high), 2024-04-18: A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization…
CVE-2023-6536 - CVSS 7.5 (high), 2024-02-07: A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using…
CVE-2023-6535 - CVSS 7.5 (high), 2024-02-07: A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using…
CVE-2023-6356 - CVSS 7.5 (high), 2024-02-07: A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using…
CVE-2023-50781 - CVSS 7.5 (high), 2024-02-05: A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to…
CVE-2024-0646 - CVSS 7.8 (high), 2024-01-17: An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls…
CVE-2024-0565 - CVSS 7.4 (high), 2024-01-15: An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This…
CVE-2024-0562 - CVSS 7.8 (high), 2024-01-15: A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi_unregister is called to stop further write-back and waits for associated…
CVE-2023-7192 - CVSS 5.5 (medium), 2024-01-02: A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local…
CVE-2023-6546 - CVSS 7 (high), 2023-12-21: A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the…
CVE-2023-6610 - CVSS 7.1 (high), 2023-12-08: An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to…
CVE-2023-6606 - CVSS 7.1 (high), 2023-12-08: An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash…
CVE-2023-42669 - CVSS 6.5 (medium), 2023-11-06: A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This vulnerability…
CVE-2023-3961 - CVSS 9.8 (critical), 2023-11-03: A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba…
CVE-2023-4091 - CVSS 6.5 (medium), 2023-11-03: A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module…
CVE-2023-5178 - CVSS 8.8 (high), 2023-11-01: A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux…
CVE-2023-4911 - CVSS 7.8 (high), 2023-10-03: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow…
CVE-2023-4732 - CVSS 4.7 (medium), 2023-10-03: A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause…
CVE-2023-42753 - CVSS 7.8 (high), 2023-09-25: An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets`…
CVE-2023-4806 - CVSS 5.9 (medium), 2023-09-18: A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an…
CVE-2023-4813 - CVSS 5.9 (medium), 2023-09-12: A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash.…
CVE-2023-4459 - CVSS 5.5 (medium), 2023-08-21: A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux…
CVE-2023-4194 - CVSS 5.5 (medium), 2023-08-07: A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to…
CVE-2023-4132 - CVSS 5.5 (medium), 2023-08-03: A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is…
CVE-2023-4004 - CVSS 7.8 (high), 2023-07-31: A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a…
CVE-2023-3772 - CVSS 5.5 (medium), 2023-07-25: A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN…
CVE-2023-3812 - CVSS 7.8 (high), 2023-07-24: An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big)…
CVE-2023-3567 - CVSS 7.1 (high), 2023-07-24: A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user…
CVE-2023-34967 - CVSS 5.3 (medium), 2023-07-20: A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is…
CVE-2023-34966 - CVSS 7.5 (high), 2023-07-20: An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core…
CVE-2022-2127 - CVSS 5.9 (medium), 2023-07-20: An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the…
CVE-2023-34968 - CVSS 5.3 (medium), 2023-07-20: A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and…
CVE-2023-1989 - CVSS 7.1 (high), 2023-04-11: A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a…