Known vulnerabilities in Migration Toolkit for Virtualization

Vendor: Red Hat Inc.
Software: Migration Toolkit for Virtualization
Software CPE: cpe:2.3:a:red_hat:migration_toolkit_for_virtualization:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 122
Public exploits: 18
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Migration Toolkit for Virtualization Migration Toolkit for Virtualization is affected by 122 known vulnerabilities: 5 critical, 22 high, 57 medium, 38 low Critical High Medium Low

Vulnerabilities (122)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97292 - Improper Authentication
CVE-2024-8509		 CWE-287 Medium
No
No
 2.6.6 16.09.2024 SB2024091609
SB2024101591
#VU95571 - Command injection
CVE-2024-6923		 CWE-77 Medium
No
No
 2.6.6 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 144 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 2.6.6 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 2.6.6 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU84618 - Improper input validation
CVE-2023-26125		 CWE-20 Medium
No
No
 2.5.2 20.12.2023 SB2023122044
SB2023122139
SB2024030742
and 6 more
#VU82441 - Resource exhaustion
CVE-2023-26144		 CWE-400 Medium
No
No
 2.5.2 26.10.2023 SB2023102619
SB2023113014
SB2023122139
and 1 more
#VU82064 - Resource exhaustion
CVE-2023-39325		 CWE-400 Medium
No
No
 2.4.3, 2.5.2 16.10.2023 SB2023101651
SB2023101652
SB2023101653
and 341 more
#VU81865 - Heap-based Buffer Overflow
CVE-2023-38545		 CWE-122 High
Available
No
 2.4.3, 2.5.2 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 99 more
#VU81863 - External Control of File Name or Path
CVE-2023-38546		 CWE-73 Low
No
No
 2.4.3, 2.5.2 11.10.2023 SB2023101129
SB2023101135
SB2023101149
and 125 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 2.4.3, 2.5.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU81453 - Use After Free
CVE-2023-4813		 CWE-416 Medium
No
No
 2.4.3, 2.5.2 04.10.2023 SB2023100435
SB2023100579
SB2023100581
and 91 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 2.4.3, 2.5.2 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 2.4.3, 2.5.2 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU81097 - Out-of-bounds read
CVE-2023-4527		 CWE-125 Medium
No
No
 2.4.3, 2.5.2 25.09.2023 SB2023092525
SB2023100345
SB2023100402
and 79 more
#VU80931 - Resource exhaustion
CVE-2023-3341		 CWE-400 Medium
No
No
 2.4.3, 2.5.2 20.09.2023 SB2023092048
SB2023092050
SB2023092148
and 90 more
#VU80818 - Download of Code Without Integrity Check
CVE-2023-29401		 CWE-494 Low
No
No
 2.5.2 15.09.2023 SB2023091511
SB2023113021
SB2023122139
and 6 more
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863		 CWE-122 Critical
Available
Exploited
 2.4.3 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217		 CWE-319 Medium
No
No
 2.4.3, 2.5.2 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU79713 - Use After Free
CVE-2023-4147		 CWE-416 Low
Available
No
 2.4.3 20.08.2023 SB2023082002
SB2023082053
SB2023082833
and 51 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 2.4.3, 2.5.2 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more


Showing elements 1 - 20 out of 122