Virtualization

virtualization

Vendor: Redhat • 128 CVEs

CVEs (128)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-0160 13Broadcom CanonicalDebian+10 more 28Application Processing Engine Firmware Cp 1543 1 FirmwareDebian Linux+25 more Apr 21, 2026 Apr 7, 2014 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted pa...Show more The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.Show less
CVE-2013-4344 4Canonical OpensuseQemu+1 more 7Enterprise Linux Desktop Enterprise Linux ServerEnterprise Linux Workstation+4 more Apr 29, 2026 Oct 4, 2013 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command.
CVE-2012-6075 7Canonical DebianFedoraproject+4 more 12Debian Linux Enterprise Linux DesktopEnterprise Linux Eus+9 more Apr 29, 2026 Feb 13, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (g...Show more Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.Show less
CVE-2012-3515 7Canonical DebianOpensuse+4 more 13Debian Linux Enterprise Linux DesktopEnterprise Linux Eus+10 more Apr 29, 2026 Nov 23, 2012 N/A· v4 N/A· v3 7.2 HIGH· v2 Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers t...Show more Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."Show less
CVE-2009-4272 2Linux Redhat 6Enterprise Linux Desktop Enterprise Linux EusEnterprise Linux Server+3 more Apr 29, 2026 Jan 27, 2010 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (deadlock) via crafted packets that force collisions in th...Show more A certain Red Hat patch for net/ipv4/route.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (deadlock) via crafted packets that force collisions in the IPv4 routing hash table, and trigger a routing "emergency" in which a hash chain is too long. NOTE: this is related to an issue in the Linux kernel before 2.6.31, when the kernel routing cache is disabled, involving an uninitialized pointer and a panic.Show less
CVE-2009-3080 7Canonical DebianLinux+4 more 13Debian Linux Enterprise Linux DesktopEnterprise Linux Eus+10 more Apr 23, 2026 Nov 20, 2009 N/A· v4 N/A· v3 7.2 HIGH· v2 Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an...Show more Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request.Show less
CVE-2009-3939 7Avaya CanonicalDebian+4 more 18Aura Application Enablement Services Aura Communication ManagerAura Session Manager+15 more Apr 23, 2026 Nov 16, 2009 N/A· v4 7.1 HIGH· v3 6.6 MEDIUM· v2 The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file.
CVE-2009-2910 6Canonical FedoraprojectLinux+3 more 13Enterprise Linux Desktop Enterprise Linux EusEnterprise Linux Server+10 more Apr 23, 2026 Oct 20, 2009 N/A· v4 N/A· v3 2.1 LOW· v2 arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier...Show more arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier process by switching an ia32 process to 64-bit mode.Show less

Previous 1 2 3 4 5 67