GCVE - cpe:2.3:o:redhat:virtualization:4.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:virtualization:4.2:*:*:*:*:*:*:*

part: o version: 4.2 update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Virtualization (`86ab44fd-0554-5ff1-8c60-ae1b1ce4ff46`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-3879`	vulnerable	2026-06-08 05:13:56.276257	Details available MEDIUM (6.5) It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the calling user is skipped. A user with low privileges (eg Basic Operations) could exploit this flaw to delete disks attached to guests. Published: 2019-03-25T18:30:17.000Z Updated: 2024-08-04T19:19:18.612Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3879 http://www.securityfocus.com/bid/107561 https://access.redhat.com/errata/RHBA-2019:0802	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-14816`	vulnerable	2026-06-08 05:12:56.126125	Details available MEDIUM (5.5) There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code. Published: 2019-09-20T18:25:15.000Z Updated: 2024-08-05T00:26:39.113Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2019/08/28/1 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/ https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14816 https://www.openwall.com/lists/oss-security/2019/08/28/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1000180`	vulnerable	2026-06-08 05:10:25.606280	Details available Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later. Published: 2018-06-05T13:00:00.000Z Updated: 2024-08-05T12:33:49.372Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2018:2428 https://access.redhat.com/errata/RHSA-2018:2669 https://access.redhat.com/errata/RHSA-2018:2643 https://access.redhat.com/errata/RHSA-2018:2424 https://access.redhat.com/errata/RHSA-2018:2423	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.