# Redhat Virtualization


- [CVE-2014-7169](https://insights.sbomify.com/CVE-2014-7169/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-6271](https://insights.sbomify.com/CVE-2014-6271/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2023-4911](https://insights.sbomify.com/CVE-2023-4911/): GNU C Library Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2021-3560](https://insights.sbomify.com/CVE-2021-3560/): Red Hat Polkit Incorrect Authorization (high 7.8, exploited in the wild)
- [CVE-2014-0160](https://insights.sbomify.com/CVE-2014-0160/): OpenSSL Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2015-0235](https://insights.sbomify.com/CVE-2015-0235/): Memory corruption in n/a (critical 10.0)
- [CVE-2019-10160](https://insights.sbomify.com/CVE-2019-10160/): Information disclosure in python (critical 9.8)
- [CVE-2018-17963](https://insights.sbomify.com/CVE-2018-17963/): Integer overflow in n/a (critical 9.8)
- [CVE-2018-8088](https://insights.sbomify.com/CVE-2018-8088/): Improper Access Control in SLF4J (critical 9.8)
- [CVE-2018-7750](https://insights.sbomify.com/CVE-2018-7750/): Paramiko not properly checking authentication before processing other requests (critical 9.8)
- [CVE-2017-7525](https://insights.sbomify.com/CVE-2017-7525/): jackson-databind is vulnerable to a deserialization flaw (critical 9.8)
- [CVE-2017-9214](https://insights.sbomify.com/CVE-2017-9214/): Integer overflow in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/redhat/virtualization/