Red Hat Red Hat Enterprise Linux 8 Advanced Virtualization
33 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-8860 | | Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback | LOW 3.3 | 0.2 % | ||
| CVE-2025-47711 | | Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service | MEDIUM 6.5 | 0.5 % | ||
| CVE-2025-47712 | | Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-7730 | | Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb() | HIGH 7.8 | 0.3 % | ||
| CVE-2024-3447 | | Qemu: sdhci: heap buffer overflow in sdhci_write_dataport() | MEDIUM 6.0 | 0.6 % | ||
| CVE-2024-6519 | | Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability | HIGH 8.2 | 0.2 % | ||
| CVE-2024-8612 | | Qemu-kvm: information leak in virtio devices | LOW 3.8 | 0.2 % | ||
| CVE-2024-8354 | | Qemu-kvm: usb: assertion failure in usb_ep_get() | MEDIUM 5.5 | 0.3 % | ||
| CVE-2024-8235 | | Libvirt: crash of virtinterfaced via virconnectlistinterfaces() | MEDIUM 6.2 | 0.2 % | ||
| CVE-2024-7409 | | Qemu: denial of service via improper synchronization in qemu nbd server during socket closure | HIGH 7.5 | 1.0 % | ||
| CVE-2024-7383 | | Libnbd: nbd server improper certificate validation | HIGH 7.4 | 0.4 % | ||
| CVE-2024-6505 | | Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss | MEDIUM 6.8 | 0.7 % | ||
| CVE-2024-4467 | | Qemu-kvm: 'qemu-img info' leads to host file read/write | HIGH 7.8 | 0.3 % | ||
| CVE-2024-4693 | | Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash | MEDIUM 5.5 | 0.3 % | ||
| CVE-2024-4418 | | Libvirt: stack use-after-free in virnetclientioeventloop() | MEDIUM 6.2 | 0.5 % | ||
| CVE-2024-3567 | | Qemu-kvm: net: assertion failure in update_sctp_checksum() | MEDIUM 5.5 | 0.4 % | ||
| CVE-2024-3446 | | Qemu: virtio: dma reentrancy issue leads to double free vulnerability | HIGH 8.2 | 0.3 % | ||
| CVE-2024-2494 | | Libvirt: negative g_new0 length can lead to unbounded memory allocation | MEDIUM 6.2 | 0.4 % | ||
| CVE-2024-2496 | | Libvirt: null pointer dereference in udevconnectlistallinterfaces() | MEDIUM 5.5 | 0.3 % | ||
| CVE-2024-1441 | | Libvirt: off-by-one error in udevlistinterfacesbystatus() | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-6683 | | Qemu: vnc: null pointer dereference in qemu_clipboard_request() | MEDIUM 6.5 | 1.3 % | ||
| CVE-2023-6693 | | Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx() | MEDIUM 5.3 | 0.3 % | ||
| CVE-2023-5088 | | Qemu: improper ide controller reset can lead to mbr overwrite | HIGH 7.0 | 0.2 % | ||
| CVE-2023-5215 | | Libnbd: crash or misbehaviour when nbd server returns an unexpected block size | MEDIUM 6.5 | 0.8 % | ||
| CVE-2023-2680 | | Dma reentrancy issue (incomplete fix for cve-2021-3750) | HIGH 8.2 | 0.2 % | ||
| CVE-2023-3255 | | Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service | MEDIUM 6.5 | 1.9 % | ||
| CVE-2023-3301 | | Triggerable assertion due to race condition in hot-unplug | MEDIUM 5.6 | 0.3 % | ||
| CVE-2023-4135 | | Out-of-bounds read information disclosure vulnerability | MEDIUM 6.5 | 0.4 % | ||
| CVE-2023-3180 | | Heap buffer overflow in virtio_crypto_sym_op_helper() | MEDIUM 6.5 | 0.2 % | ||
| CVE-2023-1386 | | Qemu: 9pfs: suid/sgid bits not dropped on file write | HIGH 7.8 | 0.2 % | ||
| CVE-2023-3750 | | Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service | MEDIUM 6.5 | 0.8 % | ||
| CVE-2023-3019 | | Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() | MEDIUM 6.5 | 0.3 % | ||
| CVE-2023-3354 | | Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service | HIGH 7.5 | 1.6 % |