Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2022-0207

vdsm: disclosure of sensitive values in log files

A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Ovirt Redhat
Products
Vdsm Enterprise Linux Rhev Hypervisor and 3 more
CVE-2019-3831

vdsm: privilege escalation to root via systemd_run

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.

CVSS 3.1 · 6.7 Medium EPSS 1.0% KEV · Not listed
Vendors
Ovirt Redhat
Products
Vdsm Enterprise Linux Gluster Storage and 1 more
CVE-2018-10908

vdsm: calls to qemu-img are not protected by prlimit/ulimit

It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to consume unbounded amounts of memory of CPU time, causing a denial of service condition that could potentially impact other users of the host.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Ovirt Redhat
Products
Vdsm Enterprise Linux Virtualization
CVE-2012-5518

vdsm: certificate generation upon node creation

vdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyone who has a matching key (and certificate)

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Ovirt
Products
Vdsm