Red Hat Virtualization 4 For Red Hat Enterprise Linux 8
Related 30slug: red-hat-virtualization-4-for-red-hat-enterprise-linux-8
No explanation yet for this tag.
Vulnerabilities related to Red Hat Virtualization 4 For Red Hat Enterprise Linux 8 30
- High 7.1 Vulnerability in Sssd CVE-2023-3758
- Medium 6.5 Kernel: null pointer dereference in __nvmet_req_complete A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service. CVE-2023-6536
- Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_execute_request A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service. CVE-2023-6535
- Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_build_iovec A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service. CVE-2023-6356
- High 7.0 Out-of-Bounds Write in Linux Kernel CVE-2024-0646
- Medium 6.8 Vulnerability in Linux Kernel CVE-2024-0565
- High 7.8 Linux Kernelでディスク取り外し後に解放済みメモリを参照する脆弱性 2024年1月に公表された、Linux Kernelの解放後使用(use-after-free)の脆弱性です。ディスクを取り外した際に、解放済みのメモリを参照してしまう問題が起きるとされています。影響を受けるのは6.0-rc3より前のバージョンで、6.0-rc3で修正されています。公表から時間がたっていますが、影響するバージョンを使っている場合は修正版への更新を検討してください。 CVE-2024-0562
- Medium 5.5 Kernel: refcount leak in ctnetlink_create_conntrack() A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow. CVE-2023-7192
- High 7.0 Vulnerability in Linux Kernel CVE-2023-6546
- High 7.1 Out-of-Bounds Read in Linux Kernel Vulnerability in Linux Kernel (CVE-2023-6606). Confidential information can be exposed externally. CVE-2023-6606
- High 7.1 Out-of-Bounds Read in Linux Kernel Vulnerability in Linux Kernel (CVE-2023-6610). Confidential information can be exposed externally. CVE-2023-6610
- Exploited High 7.8 Vulnerability in GNU C Library CVE-2023-4911
- Medium 6.5 Vulnerability in Samba's "rpcecho" development server CVE-2023-42669
- Critical 9.1 Path Traversal in Samba CVE-2023-3961
- Medium 6.5 Vulnerability in Samba CVE-2023-4091
- High 8.8 Use-After-Free in Linux Kernel Vulnerability in Linux Kernel (CVE-2023-5178). Successful exploitation can lead to full system takeover. Exploitable via nvmet_tcp_free_crypto. CVE-2023-5178
- Medium 4.7 Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x. CVE-2023-4732
- High 7.0 Out-of-Bounds Write in Linux Kernel CVE-2023-42753
- Medium 5.9 Use-After-Free in glibc Vulnerability in glibc (CVE-2023-4806). Risk of unauthorized operations or information disclosure. CVE-2023-4806
- Medium 5.9 Use-After-Free in glibc Vulnerability in glibc (CVE-2023-4813). Risk of unauthorized operations or information disclosure. CVE-2023-4813
- Medium 5.5 Vulnerability in Linux Kernel CVE-2023-4459
- Medium 5.5 Kernel: smsusb: use-after-free caused by do_submit_urb() A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition. CVE-2023-4132
- High 7.8 Use-After-Free in Linux Kernel Vulnerability in Linux Kernel (CVE-2023-4004). Successful exploitation can lead to full system takeover. CVE-2023-4004
- Medium 5.5 Vulnerability in Linux kernel's IP framework for transforming packets CVE-2023-3772
- High 7.1 Linuxカーネルのvc_screenに解放後使用の脆弱性、ローカルでクラッシュや情報漏えいのおそれ 2023年7月に公表されたLinuxカーネルの脆弱性で、vc_screenのvcs_readで解放後使用(use-after-free)が起きます。ローカルでログインできる攻撃者が悪用すると、システムがクラッシュしたり、カーネル内部の情報が漏えいしたりするおそれがあります。CVSSは7.1です。修正版の情報は事実に含まれていないため、最新の情報を確認してください。 CVE-2023-3567
- High 7.8 Linux カーネルのTUN/TAPドライバーに脆弱性、ローカルユーザーにクラッシュや権限昇格のおそれ 2023年7月に公表された古い脆弱性です。Linux カーネルのTUN/TAPデバイスドライバーで、napi fragsが有効な場合に巨大なネットワークパケットを処理すると範囲外のメモリにアクセスする問題があり、ローカルの利用者がシステムをクラッシュさせたり、権限を昇格させたりするおそれがあります。CVSSは7.8です。修正版の情報は、最新の情報を確認してください。 CVE-2023-3812
- Medium 5.3 Vulnerability in Samba CVE-2023-34968
- Medium 5.3 Vulnerability in Samba CVE-2023-34967
- High 7.5 Vulnerability in Samba CVE-2023-34966
- Medium 5.9 Out-of-Bounds Read in Samba Vulnerability in Samba (CVE-2022-2127). Risk of unauthorized operations or information disclosure. CVE-2022-2127