Known vulnerabilities in redhat-virtualization-host (Red Hat package) - page 3
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:redhat-virtualization-host_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
69
Public exploits:
17
Known exploited (KEV):
6
Breakdown by Severity Chart
4.4.4-20210307.0.el8_3
4.3.23-20220622.0.el7_9
4.3.22-20220330.1.el7_9
4.3.21-20220126.0.el7_9
4.3.20-20211202.1.el7_9
4.3.19-20211013.0.el7_9
4.3.18-20210903.0.el7_9
4.4.7-20210804.0.el8_4
4.4.7-20210715.1.el8_4
4.3.17-20210713.0.el7_9
4.4.6-20210615.0.el8_4
4.3.16-20210615.0.el7_9
4.4.6-20210527.3.el8_4
4.4.5-20210330.0.el8_3
4.3.14-20210322.0.el7_9
4.4.4-20210201.0.el8_3
4.3.13-20210127.0.el7_9
4.3-20190409.0.el7_6
4.2-20181121.0.el7_6
4.3.9-20200324.0.el7_8
4.3.12-20201216.0.el7_9
4.4.3-20201210.0.el8_3
4.4.3-20201116.0.el8_3
4.4.2-20200930.0.el8_2
4.3.11-20200922.0.el7_9
4.2-20191022.0.el7_6
4.2-20191107.0.el7_6
4.3.6-20191108.0.el7_7
4.3.6-20190924.0.el7_7
4.2-20190919.0.el7_6
4.3.5-20190920.0.el7_7
4.3.5-20190722.0.el7_7
4.3.4-20190620.3.el7_6
4.2-20190411.1.el7_6
4.2-20190618.0.el7_6
4.3-20190610.0.el7_6
4.3-20190512.0.el7_6
4.2-20190512.0.el7_6
4.3-20190418.0.el7_6
4.1-20170816.2.el7_4
4.2-20190219.0.el7_6
4.2-20190129.0.el7_6
4.2-20181026.0.el7_6
4.2-20180828.2.el7_5
4.2-20180724.0.el7_5
4.2-20180622.0.el7_5
4.2-20180531.0.el7_5
3.6-20180521.0.el7_3
4.2-20180518.2.el7_5
4.2-20180508.0.el7_5
4.1-20180426.0.el7_5
4.0-20170307.1.el7_3
4.2-20180813.0.el7_5
Vulnerabilities (69)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU55143 - Integer overflow CVE-2021-33909 |
CWE-190 | Low | 4.3.17-20210713.0.el7_9, 4.4.7-20210715.1.el8_4 | 21.07.2021 |
SB2021072106 SB2021072222 SB2021072223 and 63 more |
||
| #VU55034 - Uncontrolled Memory Allocation CVE-2021-33910 |
CWE-789 | Low | 4.4.7-20210715.1.el8_4 | 20.07.2021 |
SB2021072031 SB2021072032 SB2021072206 and 31 more |
||
| #VU54454 - Use After Free CVE-2021-33034 |
CWE-416 | Low | 4.3.17-20210713.0.el7_9, 4.4.7-20210715.1.el8_4 | 30.06.2021 |
SB2021063013 SB2021063014 SB2021063015 and 55 more |
||
| #VU54316 - Out-of-bounds write CVE-2021-3501 |
CWE-787 | Low | 4.4.6-20210615.0.el8_4 | 22.06.2021 |
SB2021062229 SB2021062312 SB2021060329 and 1 more |
||
| #VU54191 - Incomplete cleanup CVE-2020-24489 |
CWE-459 | Low | 4.3.16-20210615.0.el7_9, 4.4.6-20210615.0.el8_4 | 17.06.2021 |
SB2021061708 SB2021061808 SB2021062119 and 33 more |
||
| #VU53837 - Permissions, Privileges, and Access Controls CVE-2021-3560 |
CWE-264 | Low | 4.4.6-20210615.0.el8_4 | 07.06.2021 |
SB2021060707 SB2021060712 SB2021060714 and 18 more |
||
| #VU53609 - Improper input validation CVE-2021-25217 |
CWE-20 | Medium | 4.3.16-20210615.0.el7_9 | 27.05.2021 |
SB2021052708 SB2021052808 SB2021052902 and 38 more |
||
| #VU51733 - NULL Pointer Dereference CVE-2021-3449 |
CWE-476 | Medium | 4.4.5-20210330.0.el8_3 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 56 more |
||
| #VU51732 - Security Features CVE-2021-3450 |
CWE-254 | Medium | 4.4.5-20210330.0.el8_3 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 50 more |
||
| #VU51456 - Integer overflow CVE-2021-27219 |
CWE-190 | Low | 4.3.16-20210615.0.el7_9, 4.4.6-20210615.0.el8_4 | 15.03.2021 |
SB2021021524 SB2021032305 SB2021053117 and 40 more |
||
| #VU50990 - Integer overflow CVE-2020-36242 |
CWE-190 | High | 4.4.6-20210527.3.el8_4 | 28.02.2021 |
SB2021022812 SB2021022813 SB2021052024 and 27 more |
||
| #VU50040 - Heap-based Buffer Overflow CVE-2021-3156 |
CWE-122 | Low | 4.3.13-20210127.0.el7_9, 4.4.4-20210201.0.el8_3 | 26.01.2021 |
SB2021012632 SB2021012633 SB2021012634 and 55 more |
||
| #VU49910 - Missing release of memory after effective lifetime CVE-2020-27827 |
CWE-401 | Medium | 4.3.14-20210322.0.el7_9 | 21.01.2021 |
SB2021012119 SB2021012120 SB2021012121 and 22 more |
||
| #VU49845 - Insufficient Verification of Data Authenticity CVE-2020-25686 |
CWE-345 | Low | 4.3.13-20210127.0.el7_9, 4.4.4-20210201.0.el8_3 | 20.01.2021 |
SB2021012070 SB20210120108 SB20210120122 and 27 more |
||
| #VU49844 - Use of a Broken or Risky Cryptographic Algorithm CVE-2020-25685 |
CWE-327 | Low | 4.3.13-20210127.0.el7_9, 4.4.4-20210201.0.el8_3 | 20.01.2021 |
SB2021012070 SB20210120107 SB20210120122 and 27 more |
||
| #VU49843 - Insufficient Verification of Data Authenticity CVE-2020-25684 |
CWE-345 | Low | 4.3.13-20210127.0.el7_9, 4.4.4-20210201.0.el8_3 | 20.01.2021 |
SB2021012070 SB20210120106 SB20210120122 and 27 more |
||
| #VU50367 - Covert Timing Channel CVE-2020-25659 |
CWE-385 | Medium | 4.4.6-20210527.3.el8_4 | 11.01.2021 |
SB2020111230 SB2021052024 SB2021060319 and 18 more |
||
| #VU48444 - Uncontrolled Recursion CVE-2020-28196 |
CWE-674 | Medium | 4.4.6-20210527.3.el8_4 | 06.11.2020 |
SB2020111617 SB2020111618 SB2020112306 and 23 more |
||
| #VU16578 - Reachable Assertion CVE-2018-17204 |
CWE-617 | Low | 4.2-20181121.0.el7_6 | 16.12.2018 |
SB2018121811 SB2019011611 SB2019011617 and 3 more |
||
| #VU15723 - Information Exposure Through Timing Discrepancy CVE-2018-5407 |
CWE-208 | Low | 4.3-20190409.0.el7_6 | 06.11.2018 |
SB2018110602 SB2018111301 SB2018112201 and 30 more |
Showing elements 41 - 60 out of 69