[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fX_BbAvkFbFyvTakVXqZHFlIwZXyaUXNcUoMZbn0_fFo":3,"g5a-family:redhat\u002Fvirtualization_host":127,"g5a-ex:redhat\u002Fvirtualization_host@*":130},{"success":4,"data":5},true,{"product":6,"versions":17,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":81,"seoMetadata":105,"meta":124},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":16},"redhat","virtualization_host",1,83,3,"2024-02-07",[14],{"version":15,"cve_count":10,"kev_count":11,"has_kev":4},"4.0","Virtualization Host by Redhat is a technology product with 1 tracked version and 83 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[18],{"version":15,"cve_count":10,"kev_count":11,"has_kev":4},[20,28,35,41,46,51,58,63,70,75],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":27},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",7.8,"v3.1","High",0.92795,{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":25,"severity":26,"isKev":33,"epssScore":34},"CVE-2019-11479","Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363.","2019-06-19",7.5,false,0.9166,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":25,"severity":26,"isKev":33,"epssScore":40},"CVE-2021-44142","The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide \"...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver.\" Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.","2022-02-21",8.8,0.73589,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":39,"cvssVersion":25,"severity":26,"isKev":33,"epssScore":45},"CVE-2022-0435","A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.","2022-03-25",0.6777,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":50},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.63769,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":25,"severity":56,"isKev":33,"epssScore":57},"CVE-2017-7525","A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.","2018-02-06",9.8,"Critical",0.37721,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":62},"CVE-2021-3560","It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","2022-02-16",0.23708,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":25,"severity":68,"isKev":33,"epssScore":69},"CVE-2019-1559","If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","2019-02-27",5.9,"Medium",0.17139,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":55,"cvssVersion":25,"severity":56,"isKev":33,"epssScore":74},"CVE-2018-8088","org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.","2018-03-20",0.14703,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":24,"cvssVersion":79,"severity":26,"isKev":33,"epssScore":80},"CVE-2018-1000001","In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.","2018-01-31","v3.0",0.13368,[82,91,96,101],{"cveId":83,"description":84,"publishedDate":85,"cvssScore":24,"severity":26,"isKev":4,"epssScore":86,"cisaVulnName":87,"cisaDateAdded":88,"cisaShortDescription":89,"cisaRequiredAction":90},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.","2022-03-03",0.05528,"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":47,"description":48,"publishedDate":49,"cvssScore":24,"severity":26,"isKev":4,"epssScore":50,"cisaVulnName":92,"cisaDateAdded":93,"cisaShortDescription":94,"cisaRequiredAction":95},"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":59,"description":60,"publishedDate":61,"cvssScore":24,"severity":26,"isKev":4,"epssScore":62,"cisaVulnName":97,"cisaDateAdded":98,"cisaShortDescription":99,"cisaRequiredAction":100},"Red Hat Polkit Incorrect Authorization Vulnerability","2023-05-12","Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.","Apply updates per vendor instructions.",{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"severity":26,"isKev":4,"epssScore":27,"cisaVulnName":102,"cisaDateAdded":103,"cisaShortDescription":104,"cisaRequiredAction":100},"Linux Kernel Privilege Escalation Vulnerability","2022-04-25","Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"",{"title":106,"metaDescription":107,"keywords":108,"structuredData":109},"Virtualization Host by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Virtualization Host by Redhat covering 1 version with 83 tracked vulnerabilities including 0 critical and 4 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Virtualization Host vulnerabilities, Virtualization Host security, Virtualization Host CVE, Redhat Virtualization Host, Virtualization Host threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Virtualization Host KEV, Virtualization Host exploited vulnerabilities",{"@context":110,"@type":111,"name":112,"description":107,"url":113,"manufacturer":114,"applicationCategory":118,"softwareVersion":119,"mainEntity":120},"https:\u002F\u002Fschema.org","SoftwareApplication","Virtualization Host","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fvirtualization_host",{"@type":115,"name":116,"url":117},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","1 versions tracked",{"@type":121,"name":122,"description":123,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Virtualization Host Security Vulnerabilities","Security vulnerabilities affecting Virtualization Host by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":125,"apiVersion":126},"2026-10-17T13:10:09.393Z","3.0",[128],{"product":129,"cves":9},"virtualization_host_eus",{"rows":131,"total":144,"capped":33,"failed":144},[132,135,138,141],{"cveId":83,"name":87,"severity":26,"cvss":24,"added":88,"epss":86,"published":85,"ranges":133,"hits":134,"checked":33,"covers":33},[],[],{"cveId":47,"name":92,"severity":26,"cvss":24,"added":93,"epss":50,"published":49,"ranges":136,"hits":137,"checked":33,"covers":33},[],[],{"cveId":59,"name":97,"severity":26,"cvss":24,"added":98,"epss":62,"published":61,"ranges":139,"hits":140,"checked":33,"covers":33},[],[],{"cveId":21,"name":102,"severity":26,"cvss":24,"added":103,"epss":27,"published":23,"ranges":142,"hits":143,"checked":33,"covers":33},[],[],4]