Red Hat Enterprise Virtualization Host vulnerabilities

2 CVEs affecting Red Hat Enterprise Virtualization Host, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-14652, published 2018-10-31.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-1111, published 2018-05-17. High severity, CVSS 7.5. EPSS: 97.9% chance of exploitation in the next 30 days. DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious…
• CVE-2018-14652, published 2018-10-31. Medium severity, CVSS 6.5. EPSS: 2.7% chance of exploitation in the next 30 days. The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr'…