oVirt

Records36All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

oVirt records in CISA KEV

TI-2022-00753 Linux Kernel Privilege Escalation Vulnerability CRITICAL 93KEV 2022-04-25

Components

Products in the NVD configurations · select one to filter the records

Ovirt 12 records MEDIUM Ovirt-engine 9 records CRITICAL Vdsm 4 records LOW Node 2 records HIGH Cockpit-ovirt 1 record LOW Log Collector 1 record LOW Mom 1 record LOW Ovirt-ansible-roles 1 record MEDIUM

Records

2 records in Node · all components

TI-2022-00359 CVE-2022-0435

Out-of-bounds write in kernel

HIGH 75

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.6777 Published 2022-03-25 Fixed CWE-787

TI-2013-00224 CVE-2013-0293 · GHSA-9p5c-4wp5-6336

oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation

LOW 34

oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0038 Published 2019-12-10 No fix listed CWE-269

Open these records in search →

Critical	2
High	15
Medium	18
Low	1
No CVSS	0