Virtualization (Redhat) - vulnerabilities (CVEs)

123 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2023-10-06. Vendor: Redhat.

CVEs of Virtualization

CVE-2023-5366 - CVSS 7.1 (high), 2023-10-06: A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a…
CVE-2023-4911 - CVSS 7.8 (high), 2023-10-03: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow…
CVE-2023-1668 - CVSS 8.2 (high), 2023-04-10: A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP…
CVE-2022-2805 - CVSS 6.5 (medium), 2022-10-19: A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with…
CVE-2014-0147 - CVSS 6.2 (medium), 2022-09-29: Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by…
CVE-2014-0144 - CVSS 8.6 (high), 2022-09-29: QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer…
CVE-2014-0148 - CVSS 5.5 (medium), 2022-09-29: Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing…
CVE-2022-2132 - CVSS 8.6 (high), 2022-08-31: A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted…
CVE-2022-0207 - CVSS 4.7 (medium), 2022-08-26: A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.
CVE-2022-2078 - CVSS 5.5 (medium), 2022-06-30: A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via…
CVE-2022-0330 - CVSS 7.8 (high), 2022-03-25: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This…
CVE-2022-0435 - CVSS 8.8 (high), 2022-03-25: A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of…
CVE-2022-27666 - CVSS 7.8 (high), 2022-03-23: A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal…
CVE-2021-3609 - CVSS 7 (high), 2022-03-03: .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory,…
CVE-2021-3620 - CVSS 5.5 (medium), 2022-03-03: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in…
CVE-2021-3677 - CVSS 6.5 (medium), 2022-03-02: A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database…
CVE-2020-25717 - CVSS 8.1 (high), 2022-02-18: A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.
CVE-2021-3560 - CVSS 7.8 (high), 2022-02-16: It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user.…
CVE-2021-4154 - CVSS 8.8 (high), 2022-02-04: A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user…
CVE-2021-3621 - CVSS 8.8 (high), 2021-12-23: A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows…
CVE-2021-3634 - CVSS 6.5 (medium), 2021-08-31: A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them…
CVE-2021-3501 - CVSS 7.1 (high), 2021-05-06: A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated…
CVE-2019-14850 - CVSS 3.7 (low), 2021-03-18: A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform…
CVE-2020-27827 - CVSS 7.5 (high), 2021-03-18: A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific…
CVE-2020-25657 - CVSS 5.9 (medium), 2021-01-12: A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed…
CVE-2020-35497 - CVSS 6.5 (medium), 2020-12-21: A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and public…
CVE-2019-19336 - CVSS 6.1 (medium), 2020-03-19: A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the…
CVE-2013-4535 - CVSS 8.8 (high), 2020-02-11: The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image,…
CVE-2019-14859 - CVSS 9.1 (critical), 2020-01-02: A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this…
CVE-2015-1780 - CVSS 6.5 (medium), 2019-11-22: oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center
CVE-2019-14287 - CVSS 8.8 (high), 2019-10-17: In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause…
CVE-2019-14816 - CVSS 7.8 (high), 2019-09-20: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to…
CVE-2019-14835 - CVSS 7.8 (high), 2019-09-17: A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs,…
CVE-2019-10168 - CVSS 8.8 (high), 2019-08-02: The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator"…
CVE-2019-10167 - CVSS 8.8 (high), 2019-08-02: The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the…
CVE-2019-10166 - CVSS 7.8 (high), 2019-08-02: It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML()…
CVE-2019-10161 - CVSS 8.8 (high), 2019-07-30: It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an…
CVE-2019-10126 - CVSS 9.8 (critical), 2019-06-14: A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might…
CVE-2019-3888 - CVSS 9.8 (critical), 2019-06-12: A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because…
CVE-2019-10160 - CVSS 9.8 (critical), 2019-06-07: A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7…
CVE-2019-3804 - CVSS 7.5 (high), 2019-03-26: It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack. An unauthenticated…
CVE-2019-3879 - CVSS 8.1 (high), 2019-03-25: It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission…
CVE-2019-9636 - CVSS 9.8 (critical), 2019-03-08: Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization.…
CVE-2019-1559 - CVSS 5.9 (medium), 2019-02-27: If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL…
CVE-2018-16881 - CVSS 7.5 (high), 2019-01-25: A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which…
CVE-2018-14660 - CVSS 6.5 (medium), 2018-11-01: A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr. A remote, authenticated attacker…
CVE-2018-14661 - CVSS 6.5 (medium), 2018-10-31: It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to…
CVE-2018-14659 - CVSS 6.5 (medium), 2018-10-31: The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A…
CVE-2018-14654 - CVSS 6.5 (medium), 2018-10-31: The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could…
CVE-2018-17963 - CVSS 9.8 (critical), 2018-10-09: qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have…
CVE-2018-17958 - CVSS 7.5 (high), 2018-10-09: Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.
CVE-2018-1114 - CVSS 6.5 (medium), 2018-09-11: It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to…
CVE-2018-10930 - CVSS 6.5 (medium), 2018-09-04: A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this flaw to write to a destination outside the…
CVE-2018-10858 - CVSS 8.8 (high), 2018-08-22: A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malicious samba server could use this flaw…
CVE-2015-5160 - CVSS 5.5 (medium), 2018-08-20: libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive…
CVE-2018-10873 - CVSS 8.8 (high), 2018-08-17: A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A…
CVE-2018-10915 - CVSS 8.5 (high), 2018-08-09: A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an…
CVE-2018-10908 - CVSS 6.5 (medium), 2018-08-09: It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an…
CVE-2018-5390 - CVSS 7.5 (high), 2018-08-06: Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which…
CVE-2018-10897 - CVSS 8.8 (high), 2018-08-01: A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an…
CVE-2017-15119 - CVSS 8.6 (high), 2018-07-27: The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large…
CVE-2017-15113 - CVSS 7.2 (high), 2018-07-27: ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log…
CVE-2018-10862 - CVSS 5.5 (medium), 2018-07-27: WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to…
CVE-2017-7539 - CVSS 7.5 (high), 2018-07-26: An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine…
CVE-2016-8647 - CVSS 4.9 (medium), 2018-07-26: An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain…
CVE-2017-7481 - CVSS 9.8 (critical), 2018-07-19: Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup()…
CVE-2018-10875 - CVSS 7.8 (high), 2018-07-13: A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under…
CVE-2018-13405 - CVSS 7.8 (high), 2018-07-06: The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a…
CVE-2018-10855 - CVSS 5.9 (medium), 2018-07-03: Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect…
CVE-2018-10874 - CVSS 7.8 (high), 2018-07-02: In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control,…
CVE-2018-1073 - CVSS 5.3 (medium), 2018-06-19: The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker…
CVE-2018-11806 - CVSS 8.2 (high), 2018-06-13: m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.
CVE-2018-1000180 - CVSS 7.5 (high), 2018-06-05: Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key…
CVE-2018-3639 - CVSS 5.5 (medium), 2018-05-22: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are…
CVE-2018-10237 - CVSS 5.9 (medium), 2018-04-26: Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that…
CVE-2018-1059 - CVSS 6.1 (medium), 2018-04-24: The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical…
CVE-2018-1088 - CVSS 8.1 (high), 2018-04-18: A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster…
CVE-2017-12196 - CVSS 5.9 (medium), 2018-04-18: undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the…
CVE-2018-8088 - CVSS 9.8 (critical), 2018-03-20: org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted…
CVE-2018-7750 - CVSS 9.8 (critical), 2018-03-13: transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3,…
CVE-2018-6764 - CVSS 7.8 (high), 2018-02-23: util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container…
CVE-2017-7525 - CVSS 9.8 (critical), 2018-02-06: A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to…
CVE-2018-5968 - CVSS 8.1 (high), 2018-01-22: FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the…
CVE-2018-5344 - CVSS 7.8 (high), 2018-01-12: In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service…
CVE-2017-7536 - CVSS 7 (high), 2018-01-10: In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to…
CVE-2017-10664 - CVSS 7.5 (high), 2017-08-02: qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting…
CVE-2017-7980 - CVSS 7.8 (high), 2017-07-25: Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or…
CVE-2017-9214 - CVSS 9.8 (critical), 2017-05-23: In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned…
CVE-2017-5973 - CVSS 5.5 (medium), 2017-03-27: The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite…
CVE-2016-9911 - CVSS 6.5 (medium), 2016-12-23: Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in…
CVE-2016-9907 - CVSS 6.5 (medium), 2016-12-23: Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB…
CVE-2016-9921 - CVSS 6.5 (medium), 2016-12-23: Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when…
CVE-2016-7466 - CVSS 6 (medium), 2016-12-10: Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, allows local guest OS administrators to…
CVE-2016-7422 - CVSS 6 (medium), 2016-12-10: The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL…
CVE-2016-6888 - CVSS 4.4 (medium), 2016-12-10: Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of…
CVE-2016-6835 - CVSS 6 (medium), 2016-12-10: The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of…
CVE-2016-8910 - CVSS 6 (medium), 2016-11-04: The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service…
CVE-2016-8909 - CVSS 6 (medium), 2016-11-04: The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite…
CVE-2016-8669 - CVSS 6 (medium), 2016-11-04: The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service…
CVE-2016-8576 - CVSS 6 (medium), 2016-11-04: The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite…