Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8

• CVE-2023-4911 High 7.8 Exploited Glibc: buffer overflow in ld.so leading to privilege escalation 63.8%
• CVE-2023-3758 High 7.1 Sssd: race condition during authorization leads to gpo policies functioning inconsistently 1.0%
• CVE-2023-6536 Medium 6.5 Kernel: null pointer dereference in __nvmet_req_complete 1.5%
• CVE-2023-6535 Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_execute_request 1.5%
• CVE-2023-6356 Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_build_iovec 1.5%
• CVE-2024-0646 High 7.0 Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination 0.3%
• CVE-2024-0565 Medium 6.8 Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client 2.0%
• CVE-2024-0562 High 7.8 Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c 0.3%
• CVE-2023-7192 Medium 5.5 Kernel: refcount leak in ctnetlink_create_conntrack() 0.3%
• CVE-2023-6546 High 7.0 Kernel: gsm multiplexing race condition leads to privilege escalation 0.7%
• CVE-2023-6610 High 7.1 Kernel: oob access in smb2_dump_detail 0.4%
• CVE-2023-6606 High 7.1 Kernel: out-of-bounds read vulnerability in smbcalcsize 0.5%
• CVE-2023-42669 Medium 6.5 Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc 1.9%
• CVE-2023-3961 Critical 9.1 Samba: smbd allows client access to unix domain sockets on the file system as root 2.7%
• CVE-2023-4091 Medium 6.5 Samba: smb clients can truncate files with read-only permissions 1.3%
• CVE-2023-5178 High 8.8 Kernel: use after free in nvmet_tcp_free_crypto in nvme 9.6%
• CVE-2023-4732 Medium 4.7 Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h 0.2%
• CVE-2023-42753 High 7.0 Kernel: netfilter: potential slab-out-of-bound access due to integer underflow 0.5%
• CVE-2023-4806 Medium 5.9 Glibc: potential use-after-free in getaddrinfo() 1.6%
• CVE-2023-4813 Medium 5.9 Glibc: potential use-after-free in gaih_inet() 1.9%
• CVE-2023-4459 Medium 5.5 Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup() 0.2%
• CVE-2023-4132 Medium 5.5 Kernel: smsusb: use-after-free caused by do_submit_urb() 0.3%
• CVE-2023-4004 High 7.8 Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() 0.9%
• CVE-2023-3772 Medium 5.5 Kernel: xfrm: null pointer dereference in xfrm_update_ae_params() 0.5%
• CVE-2023-3812 High 7.8 Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags 0.3%
• CVE-2023-3567 High 7.1 Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race 0.4%
• CVE-2023-34968 Medium 5.3 Samba: spotlight server-side share path disclosure 1.3%
• CVE-2023-34967 Medium 5.3 Samba: type confusion in mdssvc rpc service for spotlight 61.2%
• CVE-2023-34966 High 7.5 Samba: infinite loop in mdssvc rpc service for spotlight 62.4%
• CVE-2022-2127 Medium 5.9 Samba: out-of-bounds read in winbind auth_crap 1.7%
• CVE-2023-1989 High 7.0 Kernel: use after free bug in btsdio_remove due to race condition 0.4%