Red Hat Enterprise Virtualization vulnerabilities

36 CVEs affecting Red Hat Enterprise Virtualization, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-5201, published 2020-02-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1111, published 2018-05-17. High severity, CVSS 7.5. EPSS: 97.9% chance of exploitation in the next 30 days. DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious…
CVE-2015-3456, published 2015-05-13. High severity, CVSS 7.7. EPSS: 15.3% chance of exploitation in the next 30 days. The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute…
CVE-2008-3522, published 2008-10-02. High severity, CVSS 10.0. EPSS: 4.5% chance of exploitation in the next 30 days. Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the…
CVE-2013-1591, published 2013-01-31. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be…
CVE-2012-3406, published 2014-02-10. Medium severity, CVSS 6.8. EPSS: 3.2% chance of exploitation in the next 30 days. The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the…
CVE-2013-4282, published 2013-11-02. Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.
CVE-2012-3404, published 2014-02-10. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to…
CVE-2012-3405, published 2014-02-10. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to…
CVE-2014-3485, published 2014-07-11. Medium severity, CVSS 4.0. EPSS: 1.5% chance of exploitation in the next 30 days. The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via…
CVE-2015-5201, published 2020-02-25. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before…

Latest

CVE-2014-8167, published 2019-11-13. Medium severity, CVSS 5.9. EPSS: 0.7% chance of exploitation in the next 30 days. vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack
CVE-2013-4280, published 2019-11-04. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Insecure temporary file vulnerability in RedHat vsdm 4.9.6.
CVE-2017-2614, published 2018-07-27. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if it is expired. This would allow access to an attacker with…
CVE-2018-1117, published 2018-06-20. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to ManageIQ/CloudForms' playbook inadvertently disclosing admin…
CVE-2018-1074, published 2018-04-26. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A…
CVE-2016-6310, published 2017-08-22. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV before 4.0.
CVE-2016-6338, published 2017-04-20. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin session timeout…
CVE-2016-4443, published 2016-12-14. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.