Red Hat Enterprise Virtualization Hypervisor vulnerabilities

5 CVEs affecting Red Hat Enterprise Virtualization Hypervisor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-5201, published 2020-02-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-0877, published 2019-11-22. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. PyXML: Hash table collisions CPU usage Denial of Service
CVE-2015-5201, published 2020-02-25. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before…
CVE-2011-1576, published 2011-08-31. Medium severity, CVSS 5.7. EPSS: 1% chance of exploitation in the next 30 days. The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV)…
CVE-2010-0430, published 2013-12-27. High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days. libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write…
CVE-2010-2223, published 2010-06-24. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 does not properly perform VM post-zeroing after the removal of a…