enterprise linux virtualization vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv2

PyXML: Hash table collisions CPU usage Denial of Service

Python Pyxml -Redhat Enterprise Virtualization Hypervisor -Redhat Enterprise Linux 5.0 Redhat Enterprise Linux 6.0

5

CVSSv2

Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote malicious users to cause a denial of service (crash) via a long password in a SPICE ticket.

Spice Project Spice 0.12.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Virtualization 3.0 Redhat Enterprise Linux 5

9.3

CVSSv2

A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This flaw allows an malicious user to trick the root user into running a specially crafted sssctl command, such as via sudo, to gain root ...

Fedoraproject Sssd 2.6.0 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Virtualization Host 4.0 Redhat Virtualization 4.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Eus 8.1 Redhat Enterprise Linux Eus 8.2 Redhat Enterprise Linux Server Tus 8.2 Redhat Enterprise Linux Server Aus 8.2 Redhat Enterprise Linux Server Tus 8.4 Redhat Enterprise Linux Server Aus 8.4 Fedoraproject Fedora 34

5.7

CVSSv2

The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote malicious users to cause a denial o...

Linux Linux Kernel 2.6.18 Redhat Enterprise Linux 5 Redhat Enterprise Linux 6.0 Redhat Enterprise Virtualization Hypervisor

10

CVSSv2

Stack-based buffer overflow in libpixman, as used in Pale Moon prior to 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pi...

Redhat Enterprise Virtualization 3.0 Redhat Enterprise Linux 6.0 Palemoon Pale Moon

2.1

CVSSv2

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an malicious user to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

Linux Linux Kernel Redhat Virtualization 4.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Debian Debian Linux 11.0

1 Github repository

4.9

CVSSv2

The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel up to and including 4.16.3 allows local users to cause a denial of service (xfs_ilock_attr_map_shared invalid pointer dereference) via a crafted xfs image.

Linux Linux Kernel Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Virtualization Host 4.0

2.6

CVSSv2

A denial of service vulnerability exists in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform a large amount of work in initializing backend plugins, by simply opening a connection to the service. This vulnerability could ca...

Nbdkit Project Nbdkit Redhat Virtualization 4.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Server 7.0

1 Github repository

7.8

CVSSv2

A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote malicious users to cause a denial of service (deadlock) via crafted packets that force collisions in the IPv4 routing hash table, and trigger a routing "...

Linux Linux Kernel 2.6.18 Redhat Enterprise Linux Server 5.0 Redhat Enterprise Linux Workstation 5.0 Redhat Enterprise Linux Desktop 5.0 Redhat Enterprise Linux Eus 5.4 Redhat Virtualization 5.0

7.2

CVSSv2

The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU prior to 1.7.2 allows remote malicious users to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.

Qemu Qemu Redhat Enterprise Linux Server Tus 6.5 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Virtualization 3.0

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook