Openvz

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-6927 Sep 28, 20:59 LOW POC PATCH Monitor

vzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container (CT) root users. Rated low severity (CVSS 3.6), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Vzctl Openvz

NVD

CVSS 2.0

3.6

EPSS

0.1%

CVE-2013-2239 Nov 12, 14:35 MEDIUM This Month

vzkernel before 042stab080.2 in the OpenVZ modification for the Linux kernel 2.6.32 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel. Rated medium severity (CVSS 4.7). No vendor patch available.

Privilege Escalation Linux Vzkernel Openvz

NVD

CVSS 2.0

4.7

EPSS

0.2%

CVE-2015-6927

EPSS 0% CVSS 3.6

LOW POC PATCH Monitor

Information Disclosure Vzctl Openvz

NVD

CVE-2013-2239

EPSS 0% CVSS 4.7

MEDIUM This Month

Privilege Escalation Linux Vzkernel +1

NVD