Vulnerabilities (CVE)

Filtered by vendor Redhat Subscribe
Filtered by product Kvm
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-2784 1 Redhat 2 Enterprise Virtualization, Kvm 2023-12-10 6.6 MEDIUM N/A
The subpage MMIO initialization functionality in the subpage_register function in exec.c in QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly select the index for access to the callback array, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors.
CVE-2010-0431 1 Redhat 2 Enterprise Virtualization, Kvm 2023-12-10 6.6 MEDIUM N/A
QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors.
CVE-2011-4622 1 Redhat 1 Kvm 2023-12-10 4.9 MEDIUM N/A
The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle when Programmable Interval Timer (PIT) interrupt requests (IRQs) when a virtual interrupt controller (irqchip) is not available, which allows local users to cause a denial of service (NULL pointer dereference) by starting a timer.
CVE-2010-0435 1 Redhat 2 Enterprise Virtualization, Kvm 2023-12-10 4.6 MEDIUM N/A
The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via vectors related to instruction emulation.