Ovirt vulnerabilities
We track 3 vulnerabilities in Ovirt products across 2 products. 3 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on January 25, 2024.
Latest Ovirt vulnerabilities
- 7.5 High severity
Red Hat Virtualization Engine 4.4: Improper Authentication
An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authentication due to a flaw in the CreateUserSession command.
- 8.8 High severity
kernel: Out-of-bounds Write
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system
- 7.8 High severity
Linux Kernel Privilege Escalation Exploited
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use th