WaratekVRT Sign in

Redhat Virtualization Host CVEs

8 CVEs, 5 protected by Waratek

Reset
More filters (2)
Columns
Vendor redhat✕Product virtualization host✕
Overview 8 matches · 5 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
8matches 5protected62.5% 0exploited0.0% 0CISA KEV0.0% 1public PoC12.5% 0EPSS ≥ 0.50.0%
Protected by Waratek 5 62.5% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 37.5%
Critical 2 25.0% High 2 25.0% Medium 4 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 5 62.5% partly blocked 0 0.0% not blocked 3 37.5% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 1 12.5% Forecast only 0 0.0% No public exploit 7 87.5%
split by peak 2 / month
No exploit published: 3Protected by Waratek: 5 Medium: 4High: 2Critical: 2 not blocked: 3blocked by ARMR today: 5 No public exploit: 7Proof of concept only: 1
Jan 182 Protected by Waratek2 High2 blocked by ARMR today2 No public exploit2 Feb 181 Protected by Waratek1 Critical1 blocked by ARMR today1 Proof of concept only1 Mar 181 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 Apr 181 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 May 181 No exploit published1 Medium1 not blocked1 No public exploit1 Jun 181 No exploit published1 Medium1 not blocked1 No public exploit1 Jul 180 Aug 180 Sep 181 No exploit published1 Medium1 not blocked1 No public exploit1
Jan 18Feb 18Mar 18Apr 18May 18Jun 18Jul 18Aug 18Sep 18
8 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2018-1114 Medium 2018-09-11 No exploit published No public exploit It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
CVE-2018-1073 Medium 2018-06-19 No exploit published No public exploit The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker to discover the names of valid user accounts.
CVE-2018-1067 Medium 2018-05-21 No exploit published No public exploit In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.
CVE-2018-10237 Medium 2018-04-26 Protected by Waratek No public exploit Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.
CVE-2018-8088 Critical 2018-03-20 Protected by Waratek No public exploit org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.
CVE-2017-7525 Critical 2018-02-06 Protected by Waratek Proof of concept only A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.
CVE-2018-5968 High 2018-01-22 Protected by Waratek No public exploit FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.
CVE-2017-7536 High 2018-01-10 Protected by Waratek No public exploit In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an attacker may be able to validate an invalid instance and access the private member value via ConstraintViolation#getInvalidValue().