VS
Product
VM Server
On CISA KEVExploited in the wild
39
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 14Medium 12Low 3
Watch
Add VM Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2270 | 6.8 | Feb 19 | Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different… Affected: 3.4 |
| CVE-2016-4962 | 6.7 | Jun 7 | The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facility confusion) or… Affected: 3.3; 3.4 |
| CVE-2016-3115 | 6.4 | Mar 22 | Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11… Affected: 3.2 |
| CVE-2017-3242 | 5.9 | Jan 27 | Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite (subcomponent: LDOM Manager) Affected: 3.2; 3.4 |
| CVE-2023-22024 | 5.5 | Sep 20 | In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS6_CONN_RESET, that are not re-entrant Affected: 3.0 |
| CVE-2016-6198 | 5.5 | Aug 6 | The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, which allows local users to cause… Affected: 3.4 |
| CVE-2016-6197 | 5.5 | Aug 6 | fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with unlink and rename… Affected: 3.4 |
| CVE-2016-5403 | 5.5 | Aug 2 | The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by… Affected: 3.4 |
| CVE-2016-4470 | 5.5 | Jun 27 | The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to… Affected: 3.3; 3.4 |
| CVE-2016-3712 | 5.5 | May 11 | Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE… Affected: 3.3; 3.4 |
| CVE-2015-3195 | 5.3 | Dec 6 | The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors… Affected: 3.2 |
| CVE-2016-5696 | 4.8 | Aug 6 | net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP… Affected: 3.3; 3.4 |
Showing 12