Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat openshift virtualization 1 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv2
CVE-2020-14316
A flaw was found in kubevirt 0.29 and previous versions. Virtual Machine Instances (VMIs) can be used to gain access to the host's filesystem. Successful exploitation allows an malicious user to assume the privileges of the VM process on the host system. In worst-case scenar...
Kubevirt KubevirtRedhat Openshift Virtualization 1
NA
CVE-2023-1668
A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue results (for both kernel and userspace datapath) in installing a datapath flow matching all IP protocols ...
Cloudbase Open Vswitch 3.1.0Cloudbase Open VswitchDebian Debian Linux 11.0Redhat Virtualization 4.0Redhat Openshift Container Platform 4.0Redhat Openstack Platform 16.1Redhat Openstack Platform 16.2Redhat Openstack Platform 17.0Redhat Fast Datapath -
6.9
CVSSv2
CVE-2017-1000376
libffi requests an executable stack allowing malicious users to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears ...
Redhat Enterprise Virtualization Server -Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Openshift 2.0Debian Debian Linux 8.0Debian Debian Linux 9.0Libffi Project LibffiOracle Peopletools 8.57Oracle Peopletools 8.56
NA
CVE-2022-2132
A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote malicious user to cause a denial of service triggered by sending a crafted Vhost header to DPDK.
Dpdk Data Plane Development KitFedoraproject Fedora 36Debian Debian Linux 10.0Redhat Enterprise Linux 7.0Redhat Virtualization 4.0Redhat Enterprise Linux Fast Datapath 7.0Redhat Enterprise Linux 8.0Redhat Openshift Container Platform 4.0Redhat Openstack Platform 13.0Redhat Enterprise Linux Fast Datapath 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Fast Datapath 9.0
NA
CVE-2023-48795
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH prior to 9.6 and other products, allows remote malicious users to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may conseque...
Openbsd OpensshPutty PuttyFilezilla-project Filezilla ClientMicrosoft PowershellPanic Transmit 5Panic NovaRoumenpetrov PkixsshWinscp WinscpBitvise Ssh ClientBitvise Ssh ServerLancom-systems LcosLancom-systems Lcos Fx -Lancom-systems Lcos Lx -Lancom-systems Lcos Sx 5.20Lancom-systems Lcos Sx 4.20Lancom-systems Lanconfig -Vandyke SecurecrtLibssh LibsshNet-ssh Net-ssh 7.2.0Ssh2 Project Ssh2Proftpd ProftpdFreebsd Freebsd
7.1
CVSSv2
CVE-2020-27827
A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability.
Lldpd Project LldpdOpenvswitch OpenvswitchRedhat Enterprise Linux 7.0Redhat Virtualization 4.0Redhat Openstack 10Redhat Enterprise Linux 8.0Redhat Openshift Container Platform 4.0Redhat Openstack 13Fedoraproject Fedora 33Siemens Simatic Hmi Unified Comfort Panels FirmwareSiemens Simatic Net Cp 1243-1 Firmware -Siemens Simatic Net Cp 1243-8 Irc Firmware -Siemens Simatic Net Cp 1542sp-1 Firmware -Siemens Simatic Net Cp 1542sp-1 Irc Firmware -Siemens Simatic Net Cp 1543-1 Firmware -Siemens Simatic Net Cp 1543sp-1 Firmware -Siemens Simatic Net Cp 1545-1 Firmware -Siemens Tim 1531 Irc FirmwareSiemens Sinumerik One Firmware
2.1
CVSSv2
CVE-2022-2078
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an malicious user to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.
Linux Linux KernelRedhat Virtualization 4.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Debian Debian Linux 11.0
2.1
CVSSv2
CVE-2018-18397
The userfaultfd implementation in the Linux kernel prior to 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains ho...
Linux Linux KernelRedhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Tus 7.4Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Workstation 7.0Redhat Openshift Container Platform 3.11Redhat Virtualization Host 4.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux Server Eus 7.5Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 14.04
NA
CVE-2023-4911
A buffer overflow exists in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local malicious user to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID perm...
Gnu GlibcFedoraproject Fedora 37Fedoraproject Fedora 38Fedoraproject Fedora 39Redhat Virtualization Host 4.0Redhat Virtualization 4.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Codeready Linux Builder For Power Little Endian Eus 8.6Redhat Codeready Linux Builder Eus 8.6Redhat Enterprise Linux 9.0Redhat Codeready Linux Builder For Ibm Z Systems Eus 8.6Redhat Codeready Linux Builder For Arm64 Eus 8.6Redhat Enterprise Linux For Arm 64 Eus 8.6 Aarch64Redhat Enterprise Linux For Ibm Z Systems Eus S390x 8.6Redhat Enterprise Linux For Power Big Endian Eus 8.6 Ppc64le
4
CVSSv2
CVE-2021-3634
A flaw has been found in libssh in versions before 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous s...
Libssh LibsshRedhat Virtualization 4.0Redhat Enterprise Linux 8.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Mysql WorkbenchNetapp Cloud Backup -
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook