Known vulnerabilities in Red Hat Virtualization for IBM Power LE 4

Vendor: Red Hat Inc.
Software: Red Hat Virtualization for IBM Power LE
Version: 4
Software CPE: cpe:2.3:a:red_hat:red_hat_virtualization_for_ibm_power_le:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 53
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat Virtualization for IBM Power LE version 4 Red Hat Virtualization for IBM Power LE 4 is affected by 53 vulnerabilities: 5 high, 16 medium, 32 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 - 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU55006 - Use After Free
CVE-2021-36980		 CWE-416 High
No
No
 - 20.07.2021 SB2021072016
SB2021072017
SB2021102110
and 15 more
#VU54394 - Incorrect Regular Expression
CVE-2020-28500		 CWE-185 Medium
No
No
 - 27.06.2021 SB2021062702
SB2021062703
SB2021090905
and 30 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 - 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 59 more
#VU50603 - Improper input validation
CVE-2020-35498		 CWE-20 Medium
Public exploit available
No
 - 10.02.2021 SB2021021021
SB2021021218
SB2021021620
and 12 more
#VU50040 - Heap-based Buffer Overflow
CVE-2021-3156		 CWE-122 Low
Public exploit available
Exploited
 - 26.01.2021 SB2021012632
SB2021012633
SB2021012634
and 55 more
#VU50042 - Out-of-bounds read
CVE-2020-29443		 CWE-125 Medium
No
No
 - 26.01.2021 SB2021012636
SB2021060940
SB2021061423
and 2 more
#VU49910 - Missing release of memory after effective lifetime
CVE-2020-27827		 CWE-401 Medium
No
No
 - 21.01.2021 SB2021012119
SB2021012120
SB2021012121
and 22 more
#VU49845 - Insufficient Verification of Data Authenticity
CVE-2020-25686		 CWE-345 Low
Public exploit available
No
 - 20.01.2021 SB2021012070
SB20210120108
SB20210120122
and 27 more
#VU49844 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-25685		 CWE-327 Low
Public exploit available
No
 - 20.01.2021 SB2021012070
SB20210120107
SB20210120122
and 27 more
#VU49843 - Insufficient Verification of Data Authenticity
CVE-2020-25684		 CWE-345 Low
Public exploit available
No
 - 20.01.2021 SB2021012070
SB20210120106
SB20210120122
and 27 more
#VU27996 - Improper input validation
CVE-2020-10723		 CWE-20 Medium
No
No
 - 19.05.2020 SB2020051904
SB2020051905
SB2020052105
and 11 more
#VU27994 - Improper input validation
CVE-2020-10722		 CWE-20 Medium
No
No
 - 19.05.2020 SB2020051904
SB2020051905
SB2020052105
and 11 more
#VU25510 - Heap-based Buffer Overflow
CVE-2020-1711		 CWE-122 Medium
No
No
 - 21.02.2020 SB2020022116
SB2020030419
SB2020030612
and 14 more
#VU25456 - Memory corruption
CVE-2020-8608		 CWE-119 Low
No
No
 - 19.02.2020 SB2020021912
SB2020033013
SB2020040146
and 24 more
#VU48780 - Memory corruption
CVE-2015-8011		 CWE-119 High
No
No
 - 28.01.2020 SB2020012836
SB2020120408
SB2020120409
and 17 more
#VU22771 - Memory corruption
CVE-2019-17042		 CWE-119 High
No
No
 - 14.11.2019 SB2019111416
SB2019111417
SB2019100722
and 9 more
#VU22770 - Memory corruption
CVE-2019-17041		 CWE-119 High
No
No
 - 14.11.2019 SB2019111416
SB2019111417
SB2019100722
and 9 more
#VU20499 - NULL Pointer Dereference
CVE-2019-12155		 CWE-476 Medium
No
No
 - 02.09.2019 SB2019090204
SB2019090303
SB2019090501
and 11 more
#VU20446 - Heap-based Buffer Overflow
CVE-2019-14378		 CWE-122 Medium
No
No
 - 28.08.2019 SB2019082401
SB2019090204
SB2019090303
and 22 more


Showing elements 1 - 20 out of 53