Vulnerabilidades de redhat virtualization host (CVE)

7.1Alta

CVE-2023-3758 hace 2 años

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

sssd; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

1.0%EPSS

6.5Media

CVE-2023-6536 hace 2 años

Kernel: null pointer dereference in __nvmet_req_complete

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kerne…

1.5%EPSS

6.5Media

CVE-2023-6535 hace 2 años

Kernel: null pointer dereference in nvmet_tcp_execute_request

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kerne…

1.5%EPSS

6.5Media

CVE-2023-6356 hace 2 años

Kernel: null pointer dereference in nvmet_tcp_build_iovec

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing ke…

1.5%EPSS

7.8Alta

CVE-2023-4911 KEV hace 3 años

Glibc: buffer overflow in ld.so leading to privilege escalation

glibc; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binar…

64%EPSS

7.8Alta

CVE-2022-0847 KEV hace 4 años

Linux Kernel Privilege Escalation Vulnerability

kernel

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use t…

93%EPSS

7.8Alta

CVE-2022-0492 KEV hace 4 años

Linux Kernel Improper Authentication Vulnerability

kernel

A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespac…

5.5%EPSS

7.8Alta

CVE-2021-3560 KEV hace 4 años

Red Hat Polkit Incorrect Authorization Vulnerability

polkit

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local admini…

22%EPSS