Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: oVirt Component: Vdsm Clear all filters
TI-2022-00144 CVE-2022-0207 · GHSA-32qr-rh8p-qfq7

Race condition in vdsm

Priority LOW 21

A race condition was found in vdsm.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00194 Published 2022-08-26 Fixed CWE-362
TI-2012-04637 CVE-2012-5518 · GHSA-vvr9-cxf3-4gvj

Improper certificate validation in vdsm

Priority LOW 34

vdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyone who has a matching key (and certificate)

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00728 Published 2019-11-25 No fix listed CWE-295
TI-2019-02843 CVE-2019-3831 · GHSA-mgfj-qcpq-xx99

Incorrect authorization in [UNKNOWN] vdsm

Priority LOW 32

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.01029 Published 2019-03-25 Fixed CWE-863
TI-2018-07721 CVE-2018-10908 · GHSA-c34h-7mjf-54vf

Improper input validation in [UNKNOWN] vdsm

Priority LOW 31

It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01185 Published 2018-08-09 Fixed CWE-20