Red Hat Enterprise Linux Virtualization 4.0

CPE Details

Red Hat Enterprise Linux Virtualization 4.0
redhat
enterprise_linux_virtualization
4.0
2018-11-14
13h31 +00:00
2018-11-14
13h31 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:redhat:enterprise_linux_virtualization:4.0:*:*:*:*:*:*:*

Informations

Vendor

redhat

Product

enterprise_linux_virtualization

Version

4.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-14652 2018-10-31 18h00 +00:00 The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.
6.5
Medium
CVE-2018-14653 2018-10-31 18h00 +00:00 The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.
8.8
High
CVE-2018-14654 2018-10-31 18h00 +00:00 The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GF_XATTROP_ENTRY_IN_KEY' xattrop to create arbitrary, empty files on the target server.
6.5
Medium
CVE-2018-1087 2018-05-15 14h00 +00:00 kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.
8
High