Red Hat Enterprise Linux Virtualization vulnerabilities

4 CVEs affecting Red Hat Enterprise Linux Virtualization, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-14654, published 2018-10-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-14653, published 2018-10-31. High severity, CVSS 8.8. EPSS: 2.8% chance of exploitation in the next 30 days. The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated…
CVE-2018-14652, published 2018-10-31. Medium severity, CVSS 6.5. EPSS: 2.7% chance of exploitation in the next 30 days. The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr'…
CVE-2018-14654, published 2018-10-31. Medium severity, CVSS 6.5. EPSS: 2.6% chance of exploitation in the next 30 days. The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the…
CVE-2018-1087, published 2018-05-15. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions…