Red Hat Enterprise Linux Virtualization 4.0

CPE Details

Red Hat Enterprise Linux Virtualization 4.0
redhat
enterprise_linux_virtualization
4.0
2018-11-14
13h31 +00:00
2018-11-14
13h31 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:o:redhat:enterprise_linux_virtualization:4.0:*:*:*:*:*:*:*

Informations

Vendor

redhat

Product

enterprise_linux_virtualization

Version

4.0

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2018-14652 2018-10-31 18h00 +00:00 The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.
6.5
Moyen
CVE-2018-14653 2018-10-31 18h00 +00:00 The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.
8.8
Haute
CVE-2018-14654 2018-10-31 18h00 +00:00 The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GF_XATTROP_ENTRY_IN_KEY' xattrop to create arbitrary, empty files on the target server.
6.5
Moyen
CVE-2018-1087 2018-05-15 14h00 +00:00 kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.
8
Haute