📦 Virtualization

by Redhat

🔍 What is Virtualization?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-5366

HIGH CVSS 7.1 Oct 6, 2023

This vulnerability in Open vSwitch allows ICMPv6 Neighbor Advertisement packets to bypass OpenFlow rules between virtual machines. A local attacker can craft packets with spoofed target IP addresses t...

CVE-2023-4911

HIGH CVSS 7.8 Oct 3, 2023

CVE-2023-4911 is a buffer overflow vulnerability in the GNU C Library's dynamic loader (ld.so) that allows local attackers to exploit SUID binaries. By crafting malicious GLIBC_TUNABLES environment va...

CVE-2022-0330

HIGH CVSS 7.8 Mar 25, 2022

A memory access vulnerability in the Linux kernel's i915 GPU driver allows local attackers to execute malicious GPU code, potentially causing system crashes or privilege escalation. This affects Linux...

CVE-2022-27666

HIGH CVSS 7.8 Mar 23, 2022

CVE-2022-27666 is a heap buffer overflow vulnerability in the Linux kernel's IPsec ESP transformation code. It allows local attackers with standard user privileges to overwrite kernel heap objects, po...

CVE-2021-3609

HIGH CVSS 7.0 Mar 3, 2022

CVE-2021-3609 is a race condition vulnerability in the Linux kernel's CAN BCM networking protocol that allows local attackers to corrupt memory and potentially escalate privileges to root. This affect...

CVE-2020-25717

HIGH CVSS 8.1 Feb 18, 2022

CVE-2020-25717 is a privilege escalation vulnerability in Samba's domain user mapping mechanism. Authenticated attackers can exploit this flaw to gain elevated privileges on Samba servers. This affect...

CVE-2021-3560

HIGH CVSS 7.8 Feb 16, 2022

CVE-2021-3560 is a privilege escalation vulnerability in polkit's D-Bus authentication mechanism that allows unprivileged local users to bypass credential checks and gain root privileges. This affects...

CVE-2021-4154

HIGH CVSS 8.8 Feb 4, 2022

A use-after-free vulnerability in the Linux kernel's cgroup v1 parser allows local attackers with user privileges to escalate privileges. This can lead to container breakout scenarios and denial of se...

CVE-2021-3621

HIGH CVSS 8.8 Dec 23, 2021

CVE-2021-3621 is a command injection vulnerability in SSSD's sssctl command that allows attackers to execute arbitrary shell commands with root privileges. This occurs when root users run specially cr...

CVE-2021-3501

HIGH CVSS 7.1 May 6, 2021

This vulnerability in the Linux kernel's KVM API allows a user process to trigger an out-of-bounds write by manipulating the internal.ndata value. It affects Linux kernel versions before 5.12, potenti...