oVirt Vdsm 4.20.35

CPE Details

oVirt Vdsm 4.20.35
ovirt
vdsm
4.20.35
2019-03-28
17h32 +00:00
2019-03-28
17h32 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:ovirt:vdsm:4.20.35:*:*:*:*:*:*:*

Informations

Vendor

ovirt

Product

vdsm

Version

4.20.35

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2019-3831 2019-03-25 16h12 +00:00 A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.
6.7
Moyen
CVE-2018-10908 2018-08-09 17h00 +00:00 It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to consume unbounded amounts of memory of CPU time, causing a denial of service condition that could potentially impact other users of the host.
6.5
Moyen