Red Hat Enterprise Linux Advanced Virtualization Eus vulnerabilities

2 CVEs affecting Red Hat Enterprise Linux Advanced Virtualization Eus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-3748, published 2022-03-23.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-3748, published 2022-03-23. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to num_buffers being set after the…
• CVE-2021-3930, published 2022-02-18. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f).…