Red Hat Kvm vulnerabilities

4 CVEs affecting Red Hat Kvm, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4622, published 2012-01-27.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-0435, published 2010-08-24. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL…
• CVE-2011-4622, published 2012-01-27. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle when Programmable Interval Timer (PIT) interrupt requests (IRQs) when a virtual…
• CVE-2010-0431, published 2010-08-24. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly validate guest QXL driver pointers, which allows guest OS users…
• CVE-2010-2784, published 2010-08-24. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2…