Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 62

Export CSV
CVE-2013-0167

vdsm: unfiltered guestInfo dictionary DoS

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via guestInfo dictionaries with "unexpected fields."

CVSS 2.0 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Rhev Manager
CVE-2013-0168

rhev-m: insufficient MoveDisk target domain permission checks

The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly check permissions on storage domains, which allows remote authenticated storage admins to cause a denial of service (free space consumption of other storage domains) via unspecified vectors.

CVSS 2.0 · 4.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Manager Rhev Manager
CVE-2013-1591

pixman: stack-based buffer overflow

Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which triggers an infinite loop.

CVSS 3.1 · 9.8 Critical EPSS 3.6% KEV · Not listed
Vendors
Palemoon Redhat
Products
Pale Moon Enterprise Linux Enterprise Virtualization
CVE-2013-2144

rhevm: insufficient target domain permission check when cloning a VM from a snapshot

Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the target storage domain, which allows attackers to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.

CVSS 2.0 · 5.0 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Manager Rhev Manager
CVE-2013-2151

rhevm: rhev agent service unquoted search path

Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2 allows local users to gain privileges via a crafted application in an unspecified folder.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Rhev Manager
CVE-2013-2152

rhevm: spice service unquoted search path

Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecified folder.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Rhev Manager
CVE-2013-2176

rhev-m: rhev-apt service unquoted search path

Unquoted Windows search path vulnerability in the Red Hat Enterprise Virtualization Application Provisioning Tool (RHEV-APT) in the rhev-guest-tools-iso package 3.2 allows local users to gain privileges via a Trojan horse application.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Rhev Manager
CVE-2013-4181

ovirt-engine: RedirectServlet cross-site scripting flaw

Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet in oVirt Engine and Red Hat Enterprise Virtualization Manager (RHEV-M), as used in Red Hat Enterprise Virtualization 3 and 3.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Rhev Manager
CVE-2013-4236

vdsm: incomplete fix for CVE-2013-0167 issue

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.

CVSS 2.0 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Rhev Manager
CVE-2013-4282

spice: stack buffer overflow in reds_handle_ticket() function

Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of service (crash) via a long password in a SPICE ticket.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Redhat Spice Project
Products
Enterprise Linux Enterprise Virtualization Spice
CVE-2013-6434

rhev: remote-viewer spice tls-stripping issue

The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE client invocation method, initially makes insecure connections to the SPICE server, which allows man-in-the-middle attackers to spoof the SPICE server.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Manager Rhev Manager
CVE-2012-0860

rhev: vds_installer insecure /tmp use

Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/.

CVSS 2.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Manager Rhev Manager
CVE-2010-0428

libspice: Insufficient guest provided pointers validation

libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.

CVSS 2.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Qspice and 1 more
CVE-2010-0429

libspice: Relying on guest provided data structures to indicate memory allocation

libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are performed, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.

CVSS 2.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Qspice and 1 more
CVE-2010-0430

libspice: Insufficient guest provided memory mappings boundaries validations

libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings.

CVSS 2.0 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Hypervisor Rhel Virtualization
CVE-2010-0431

qemu: Insufficient guest provided pointers validation

QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.

CVSS 2.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Kvm and 1 more
CVE-2010-0435

kvm: vmx null pointer dereference

The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via vectors related to instruction emulation.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Kvm and 1 more
CVE-2010-2223

vdsm: missing VM post-zeroing after removal

Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 does not properly perform VM post-zeroing after the removal of a virtual machine's data, which allows guest OS users to obtain sensitive information by examining the disk blocks associated with a deleted virtual machine.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Hypervisor
CVE-2010-2224

rhev-m: merge snapshot does not pass postzero parameter for deleted volumes

The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M) before 2.2 does not properly pass the postzero parameter during operations on deleted volumes, which allows guest OS users to obtain sensitive information by examining the disk blocks associated with a deleted virtual machine.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Manager
CVE-2010-2784

qemu: insufficient constraints checking in exec.c:subpage_register()

The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly select the index for access to the callback array, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.

CVSS 2.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Kvm and 1 more