Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
31 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-3758 | | Sssd: race condition during authorization leads to gpo policies functioning inconsistently | HIGH 7.1 | 1.0 % | ||
| CVE-2023-6536 | | Kernel: null pointer dereference in __nvmet_req_complete | HIGH 7.5 | 1.5 % | ||
| CVE-2023-6535 | | Kernel: null pointer dereference in nvmet_tcp_execute_request | HIGH 7.5 | 1.5 % | ||
| CVE-2023-6356 | | Kernel: null pointer dereference in nvmet_tcp_build_iovec | HIGH 7.5 | 1.5 % | ||
| CVE-2024-0646 | | Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination | HIGH 7.8 | 0.3 % | ||
| CVE-2024-0565 | | Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard o… | HIGH 7.4 | 2.0 % | ||
| CVE-2024-0562 | fixed in 0:4.18.0-372.87.1.el8_6 | Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c | HIGH 7.8 | 0.3 % | ||
| CVE-2023-7192 | | Kernel: refcount leak in ctnetlink_create_conntrack() | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-6546 | | Kernel: gsm multiplexing race condition leads to privilege escalation | HIGH 7.0 | 0.7 % | ||
| CVE-2023-6610 | | Kernel: oob access in smb2_dump_detail | HIGH 7.1 | 0.4 % | ||
| CVE-2023-6606 | | Kernel: out-of-bounds read vulnerability in smbcalcsize | HIGH 7.1 | 0.5 % | ||
| CVE-2023-42669 | | Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc | MEDIUM 6.5 | 1.9 % | ||
| CVE-2023-3961 | | Samba: smbd allows client access to unix domain sockets on the file system as root | CRITICAL 9.8 | 2.7 % | ||
| CVE-2023-4091 | | Samba: smb clients can truncate files with read-only permissions | MEDIUM 6.5 | 1.3 % | ||
| CVE-2023-5178 | | Kernel: use after free in nvmet_tcp_free_crypto in nvme | HIGH 8.8 | 9.6 % | ||
| CVE-2023-4911 | | Glibc: buffer overflow in ld.so leading to privilege escalation | HIGH 7.8 | 64 % | KEV | |
| CVE-2023-4732 | fixed in 0:4.18.0-372.87.1.el8_6 | Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in in… | MEDIUM 4.7 | 0.2 % | ||
| CVE-2023-42753 | | Kernel: netfilter: potential slab-out-of-bound access due to integer underflow | HIGH 7.8 | 0.5 % | ||
| CVE-2023-4806 | | Glibc: potential use-after-free in getaddrinfo() | MEDIUM 5.9 | 1.6 % | ||
| CVE-2023-4813 | | Glibc: potential use-after-free in gaih_inet() | MEDIUM 5.9 | 2.2 % | ||
| CVE-2023-4459 | | Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup() | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-4132 | fixed in 0:4.18.0-372.91.1.el8_6 | Kernel: smsusb: use-after-free caused by do_submit_urb() | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-4004 | | Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() | HIGH 7.8 | 0.9 % | ||
| CVE-2023-3772 | | Kernel: xfrm: null pointer dereference in xfrm_update_ae_params() | MEDIUM 5.5 | 0.5 % | ||
| CVE-2023-3812 | | Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags | HIGH 7.8 | 0.3 % | ||
| CVE-2023-3567 | | Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race | HIGH 7.1 | 0.4 % | ||
| CVE-2023-34968 | | Samba: spotlight server-side share path disclosure | MEDIUM 5.3 | 1.3 % | ||
| CVE-2023-34967 | | Samba: type confusion in mdssvc rpc service for spotlight | MEDIUM 5.3 | 61 % | ||
| CVE-2023-34966 | | Samba: infinite loop in mdssvc rpc service for spotlight | HIGH 7.5 | 62 % | ||
| CVE-2022-2127 | | Samba: out-of-bounds read in winbind auth_crap | MEDIUM 5.9 | 1.7 % | ||
| CVE-2023-1989 | | Kernel: use after free bug in btsdio_remove due to race condition | HIGH 7.0 | 0.4 % |