IBM Powerkvm vulnerabilities

20 CVEs affecting IBM Powerkvm, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-5011, published 2017-04-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-3521, published 2016-07-21. Medium severity, CVSS 6.5. EPSS: 10.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote…
CVE-2015-5073, published 2016-12-13. Critical severity, CVSS 9.1. EPSS: 7.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from…
CVE-2015-3217, published 2016-12-13. High severity, CVSS 7.5. EPSS: 6.2% chance of exploitation in the next 30 days. PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular…
CVE-2016-3615, published 2016-07-21. Medium severity, CVSS 5.3. EPSS: 5.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote…
CVE-2016-5444, published 2016-07-21. Low severity, CVSS 3.7. EPSS: 4.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote…
CVE-2016-3452, published 2016-07-21. Low severity, CVSS 3.7. EPSS: 4.1% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote…
CVE-2016-5440, published 2016-07-21. Medium severity, CVSS 4.9. EPSS: 3.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote…
CVE-2016-0648, published 2016-04-21. Medium severity, CVSS 5.5. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users…
CVE-2016-0650, published 2016-04-21. Medium severity, CVSS 5.5. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users…
CVE-2016-0649, published 2016-04-21. Medium severity, CVSS 5.5. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users…

Latest

CVE-2016-5011, published 2017-04-11. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS…
CVE-2016-3044, published 2016-12-01. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.3-65.10 and 3.1 before 3.1.0.2 allows guest OS users to cause a denial of service (host OS infinite loop and hang) via unspecified vectors.
CVE-2016-3477, published 2016-07-21. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users…