[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_zwQJ7gW_zu3Pobg_TAO9binucmuHjlz8we7JX6dKJQ":3,"g5a-family:redhat\u002Fvirtualization":165,"g5a-ex:redhat\u002Fvirtualization@*":180},{"success":4,"data":5},true,{"product":6,"versions":46,"topVulnerabilitiesByEpss":58,"kevVulnerabilities":119,"seoMetadata":144,"meta":163},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":45},"redhat","virtualization",11,128,5,"2023-10-06",[14,19,22,24,27,30,32,35,37,39,42],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"3.0",25,0,false,{"version":20,"cve_count":21,"kev_count":21,"has_kev":4},"3.4",2,{"version":23,"cve_count":17,"kev_count":17,"has_kev":18},"3.6",{"version":25,"cve_count":26,"kev_count":21,"has_kev":4},"4.0",84,{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},"4.1",6,{"version":31,"cve_count":29,"kev_count":17,"has_kev":18},"4.2",{"version":33,"cve_count":34,"kev_count":17,"has_kev":18},"4.3",4,{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},"4.4",{"version":38,"cve_count":21,"kev_count":17,"has_kev":18},"5",{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},"5.0",3,{"version":43,"cve_count":29,"kev_count":44,"has_kev":4},"6.0",1,"Virtualization by Redhat is a technology product with 11 tracked versions and 128 known security vulnerabilities including 5 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[47,48,49,50,51,52,53,54,55,56,57],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":21,"has_kev":4},{"version":23,"cve_count":17,"kev_count":17,"has_kev":18},{"version":25,"cve_count":26,"kev_count":21,"has_kev":4},{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},{"version":31,"cve_count":29,"kev_count":17,"has_kev":18},{"version":33,"cve_count":34,"kev_count":17,"has_kev":18},{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},{"version":38,"cve_count":21,"kev_count":17,"has_kev":18},{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},{"version":43,"cve_count":29,"kev_count":44,"has_kev":4},[59,67,73,78,85,90,96,102,107,114],{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":4,"epssScore":66},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":64,"severity":72,"isKev":4,"epssScore":66},"CVE-2014-0160","The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","2014-04-07",7.5,"High",{"cveId":74,"description":75,"publishedDate":76,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":4,"epssScore":77},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":83,"severity":65,"isKev":18,"epssScore":84},"CVE-2015-0235","Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka \"GHOST.\"","2015-01-28",10,"v2",0.94558,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":71,"cvssVersion":64,"severity":72,"isKev":18,"epssScore":89},"CVE-2018-5390","Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.","2018-08-06",0.7111,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"cvssVersion":64,"severity":72,"isKev":18,"epssScore":95},"CVE-2022-0435","A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.","2022-03-25",8.8,0.6777,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":100,"cvssVersion":64,"severity":72,"isKev":4,"epssScore":101},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",7.8,0.63769,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":94,"cvssVersion":64,"severity":72,"isKev":18,"epssScore":106},"CVE-2019-14287","In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command.","2019-10-17",0.63764,{"cveId":108,"description":109,"publishedDate":110,"cvssScore":111,"cvssVersion":64,"severity":112,"isKev":18,"epssScore":113},"CVE-2018-3639","Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.","2018-05-22",5.5,"Medium",0.60631,{"cveId":115,"description":116,"publishedDate":117,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":18,"epssScore":118},"CVE-2017-7525","A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.","2018-02-06",0.37721,[120,125,134,138,142],{"cveId":97,"description":98,"publishedDate":99,"cvssScore":100,"severity":72,"isKev":4,"epssScore":101,"cisaVulnName":121,"cisaDateAdded":122,"cisaShortDescription":123,"cisaRequiredAction":124},"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":126,"description":127,"publishedDate":128,"cvssScore":100,"severity":72,"isKev":4,"epssScore":129,"cisaVulnName":130,"cisaDateAdded":131,"cisaShortDescription":132,"cisaRequiredAction":133},"CVE-2021-3560","It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","2022-02-16",0.23708,"Red Hat Polkit Incorrect Authorization Vulnerability","2023-05-12","Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.","Apply updates per vendor instructions.",{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"severity":72,"isKev":4,"epssScore":66,"cisaVulnName":135,"cisaDateAdded":136,"cisaShortDescription":137,"cisaRequiredAction":133},"OpenSSL Information Disclosure Vulnerability","2022-05-04","The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.",{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"severity":65,"isKev":4,"epssScore":66,"cisaVulnName":139,"cisaDateAdded":140,"cisaShortDescription":141,"cisaRequiredAction":133},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",{"cveId":74,"description":75,"publishedDate":76,"cvssScore":63,"severity":65,"isKev":4,"epssScore":77,"cisaVulnName":139,"cisaDateAdded":140,"cisaShortDescription":143,"cisaRequiredAction":133},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"title":145,"metaDescription":146,"keywords":147,"structuredData":148},"Virtualization by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Virtualization by Redhat covering 11 versions with 128 tracked vulnerabilities including 2 critical and 3 high-severity issues and 5 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Virtualization vulnerabilities, Virtualization security, Virtualization CVE, Redhat Virtualization, Virtualization threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Virtualization KEV, Virtualization exploited vulnerabilities",{"@context":149,"@type":150,"name":151,"description":146,"url":152,"manufacturer":153,"applicationCategory":157,"softwareVersion":158,"mainEntity":159},"https:\u002F\u002Fschema.org","SoftwareApplication","Virtualization","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fvirtualization",{"@type":154,"name":155,"url":156},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","11 versions tracked",{"@type":160,"name":161,"description":162,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Virtualization Security Vulnerabilities","Security vulnerabilities affecting Virtualization by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":164,"apiVersion":15},"2026-10-17T13:10:17.570Z",[166,169,172,174,176,178],{"product":167,"cves":168},"virtualization_host",83,{"product":170,"cves":171},"virtualization_manager",13,{"product":173,"cves":21},"virtualization_for_ibm_power_little_endian",{"product":175,"cves":21},"virtualization_server",{"product":177,"cves":44},"virtualization_eus",{"product":179,"cves":44},"virtualization_host_eus",{"rows":181,"total":11,"capped":18,"failed":11},[182,185,188,191,194],{"cveId":97,"name":121,"severity":72,"cvss":100,"added":122,"epss":101,"published":99,"ranges":183,"hits":184,"checked":18,"covers":18},[],[],{"cveId":126,"name":130,"severity":72,"cvss":100,"added":131,"epss":129,"published":128,"ranges":186,"hits":187,"checked":18,"covers":18},[],[],{"cveId":68,"name":135,"severity":72,"cvss":71,"added":136,"epss":66,"published":70,"ranges":189,"hits":190,"checked":18,"covers":18},[],[],{"cveId":60,"name":139,"severity":65,"cvss":63,"added":140,"epss":66,"published":62,"ranges":192,"hits":193,"checked":18,"covers":18},[],[],{"cveId":74,"name":139,"severity":65,"cvss":63,"added":140,"epss":77,"published":76,"ranges":195,"hits":196,"checked":18,"covers":18},[],[]]