Ovirt-engine vulnerabilities

2 known vulnerabilities in Ovirt-engine from Ovirt. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Red Hat Virtualization Engine 4.4: Improper Authentication

  CVE-2024-0822Jan 25, 2024Red Hat

  An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authentication due to a flaw in the CreateUserSession command.

• 7.8 High severity

  Linux Kernel Privilege Escalation Exploited

  CVE-2022-0847Mar 10, 2022KernelEPSS 92.8%

  A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use th