Red Hat Ovirt-Node vulnerabilities

2 CVEs affecting Red Hat Ovirt-Node, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-0330, published 2022-03-25.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-45417, published 2022-01-20. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.
• CVE-2022-0330, published 2022-03-25. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system…