oVirt

Records36All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

oVirt records in CISA KEV

Products in the NVD configurations · select one to filter the records

4 records in Vdsm · all components

TI-2012-04637 CVE-2012-5518 · GHSA-vvr9-cxf3-4gvj

LOW 34

vdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyone who has a matching key (and certificate)

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00728 Published 2019-11-25 No fix listed CWE-295

TI-2019-02843 CVE-2019-3831 · GHSA-mgfj-qcpq-xx99

LOW 32

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.01029 Published 2019-03-25 Fixed CWE-863

TI-2018-07721 CVE-2018-10908 · GHSA-c34h-7mjf-54vf

LOW 31

It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01185 Published 2018-08-09 Fixed CWE-20

TI-2022-00144 CVE-2022-0207 · GHSA-32qr-rh8p-qfq7

LOW 21

A race condition was found in vdsm.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00194 Published 2022-08-26 Fixed CWE-362