Redhat Enterprise Virtualization Hypervisor vulnerabilities

4 vulnerabilities

Known vulnerabilities in Redhat Enterprise Virtualization Hypervisor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2015-5201redhatenterprise_virtualization+4
EPSS score
1.46%
VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows remote attackers to log in without authentication via unspecified vectors.7.8CVE-2012-0877pythonpyxml+3
EPSS score
1.91%
PyXML: Hash table collisions CPU usage Denial of Service2.1CVE-2010-2223redhatenterprise_virtualization_hypervisor+3
EPSS score
0.37%
Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 does not properly perform VM post-zeroing after the removal of a virtual machine's data, which allows guest OS users to obtain sensitive information by examining the disk blocks associated with a deleted virtual machine.7.4CVE-2010-0430redhatenterprise_virtualization_hypervisor
EPSS score
0.54%
libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings.