Red Hat Red Hat Enterprise Linux 8 Advanced Virtualization

• CVE-2025-8860 Low 3.3 Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback 0.2%
• CVE-2025-47711 Medium 6.5 Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service 0.5%
• CVE-2025-47712 Medium 6.5 Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service 0.5%
• CVE-2024-7730 High 7.4 Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb() 0.3%
• CVE-2024-3447 Medium 6.0 Qemu: sdhci: heap buffer overflow in sdhci_write_dataport() 0.6%
• CVE-2024-6519 High 8.2 Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability 0.2%
• CVE-2024-8612 Low 3.8 Qemu-kvm: information leak in virtio devices 0.2%
• CVE-2024-8354 Medium 5.5 Qemu-kvm: usb: assertion failure in usb_ep_get() 0.3%
• CVE-2024-8235 Medium 6.2 Libvirt: crash of virtinterfaced via virconnectlistinterfaces() 0.2%
• CVE-2024-7409 High 7.5 Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 1.0%
• CVE-2024-7383 High 7.4 Libnbd: nbd server improper certificate validation 0.4%
• CVE-2024-6505 Medium 6.8 Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss 0.7%
• CVE-2024-4467 High 7.8 Qemu-kvm: 'qemu-img info' leads to host file read/write 0.3%
• CVE-2024-4693 Medium 5.5 Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash 0.3%
• CVE-2024-4418 Medium 6.2 Libvirt: stack use-after-free in virnetclientioeventloop() 0.5%
• CVE-2024-3567 Medium 5.5 Qemu-kvm: net: assertion failure in update_sctp_checksum() 0.4%
• CVE-2024-3446 High 8.2 Qemu: virtio: dma reentrancy issue leads to double free vulnerability 0.3%
• CVE-2024-2494 Medium 6.2 Libvirt: negative g_new0 length can lead to unbounded memory allocation 0.4%
• CVE-2024-2496 Medium 5.0 Libvirt: null pointer dereference in udevconnectlistallinterfaces() 0.3%
• CVE-2024-1441 Medium 5.5 Libvirt: off-by-one error in udevlistinterfacesbystatus() 0.4%
• CVE-2023-6683 Medium 6.5 Qemu: vnc: null pointer dereference in qemu_clipboard_request() 1.3%
• CVE-2023-6693 Medium 4.9 Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx() 0.3%
• CVE-2023-5088 Medium 6.4 Qemu: improper ide controller reset can lead to mbr overwrite 0.3%
• CVE-2023-5215 Medium 5.3 Libnbd: crash or misbehaviour when nbd server returns an unexpected block size 0.8%
• CVE-2023-2680 High 7.5 Dma reentrancy issue (incomplete fix for cve-2021-3750) 0.2%
• CVE-2023-3255 Medium 6.5 Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service 1.9%
• CVE-2023-3301 Medium 5.6 Triggerable assertion due to race condition in hot-unplug 0.3%
• CVE-2023-4135 Medium 6.0 Out-of-bounds read information disclosure vulnerability 0.4%
• CVE-2023-3180 Medium 6.0 Heap buffer overflow in virtio_crypto_sym_op_helper() 0.2%
• CVE-2023-1386 Low 3.3 Qemu: 9pfs: suid/sgid bits not dropped on file write 0.2%
• CVE-2023-3750 Medium 6.5 Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service 0.8%
• CVE-2023-3019 Medium 6.0 Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() 0.3%
• CVE-2023-3354 High 7.5 Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service 1.6%