Virtualization Software Vulnerabilities

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

Vendor

Identifying all affected vendors is a good starting point for an overview. This makes it possible to determine an homogeneous landscape or the most important hotspots in heterogeneous landscapes.

Product

Oracle VM VirtualBox325
QEMU288
Xen214
VMware Workstation162
Linux Foundation Xen122

Grouping vulnerabilities by products helps to get an overview. This makes it possible to determine an homogeneous landscape or the most important hotspots in heterogeneous landscapes.

Remediation

Official Fix1592
Temporary Fix0
Workaround14
Unavailable7
Not Defined498

Vendors and researchers are eager to find countermeasures to mitigate security vulnerabilities. These can be distinguished between multiple forms and levels of remediation which influence risks differently.

Exploitability

High16
Functional2
Proof-of-Concept155
Unproven192
Not Defined1746

Researcher and attacker which are looking for security vulnerabilities try to exploit them for academic purposes or personal gain. The level and quality of exploitability can be distinguished to determine simplicity and strength of attacks.

Access Vector

Not Defined0
Physical12
Local1092
Adjacent247
Network760

The approach a vulnerability it becomes important to use the expected access vector. This is typically via the network, local, or physically even.

Authentication

Not Defined0
High228
Low1011
None872

To exploit a vulnerability a certail level of authentication might be required. Vulnerabilities without such a requirement are much more popular.

User Interaction

Not Defined1
Required122
None1988

Some attack scenarios require some user interaction by a victim. This is typical for phishing, social engineering and cross site scripting attacks.

C3BM Index

Our unique C3BM Index (CVSSv3 Base Meta Index) cumulates the CVSSv3 Meta Base Scores of all entries over time. Comparing this index to the amount of disclosed vulnerabilities helps to pinpoint the most important events.

CVSSv3 Base

≤10
≤20
≤329
≤4220
≤5271
≤6546
≤7390
≤8322
≤9216
≤10117

The Common Vulnerability Scoring System (CVSS) is an industry standard to define the characteristics and impacts of security vulnerabilities. The base score represents the intrinsic aspects that are constant over time and across user environments. Our unique meta score merges all available scores from different sources to aggregate to the most reliable result.

CVSSv3 Temp

≤10
≤20
≤341
≤4243
≤5338
≤6535
≤7401
≤8311
≤9171
≤1071

The Common Vulnerability Scoring System (CVSS) uses temp scores to reflect the characteristics of a vulnerability that may change over time but not across user environments. This includes reporting confidence, exploitability and remediation levels. We do also provide our unique meta score for temp scores, even though other sources rarely publish them.

VulDB

≤10
≤22
≤349
≤4343
≤5265
≤6568
≤7275
≤8300
≤9194
≤10115

The moderation team is always defining the base vector and base score for an entry. These and all other available scores are used to generate the meta score.

NVD

≤10
≤20
≤38
≤444
≤571
≤6231
≤7226
≤8234
≤9201
≤1092

The National Vulnerability Database (NVD) is also defining CVSS vectors and scores. These are usually not complete and might differ from VulDB scores.

CNA

≤10
≤20
≤32
≤44
≤54
≤66
≤77
≤88
≤94
≤101

A CVE Numbering Authority (CNA) is responsible for assigning new CVE entries. They might also include a CVSS score. These are usually not complete and might differ from VulDB scores.

Vendor

≤10
≤20
≤34
≤412
≤57
≤627
≤734
≤850
≤972
≤101

Some vendors are willing to publish their own CVSS vectors and scores for vulnerabilities in their products. The coverage varies from vendor to vendor.

Research

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤100

There are sometimes also security researcher which provide their own CVSS vectors and scores for vulnerabilities they have found and published.

Exploit 0-day

<1k104
<2k281
<5k521
<10k489
<25k588
<50k121
<100k7
≥100k0

The moderation team is working with the threat intelligence team to determine prices for exploits. Our unique algorithm is used to identify the 0-day prices for an exploit, before it got distributed or became public. Calculated prices are aligned to prices disclosed by vulnerability broker and compared to prices we see on exploit markets.

Exploit Today

<1k1552
<2k159
<5k201
<10k126
<25k73
<50k0
<100k0
≥100k0

The 0-day prices do not consider time-relevant factors. The today price does reflect price impacts like disclosure of vulnerability details, alternative exploits, availability of countermeasures. These dynamic aspects might decrease the exploit prices over time. Under certain circumstances this happens very fast.

Exploit Market Volume

Our unique calculation of exploit prices makes it possible to forecast the expected exploit market volume. The calculated prices for all possible 0-day expoits are cumulated for this task. Comparing the volume to the amount of disclosed vulnerabilities helps to pinpoint the most important events.

🔴 CTI Activities

Our unique Cyber Threat Intelligence aims to determine the ongoing research of actors to anticipiate their acitivities. Observing exploit markets on the Darknet, discussions of vulnerabilities on mailinglists, and exchanges on social media makes it possible to identify planned attacks. Monitored actors and activities are classified whether they are offensive or defensive. They are also weighted as some actors are well-known for certain products and technologies. And some of their disclosures might contain more or less details about technical aspects and personal context. The world map highlights active actors in real-time.

Affected Products (300): Adminer Docker Image, Alauda Kubernetes Support Plugin, Alpine Linux Docker Image, Amos Benari rbovirt, Anchore Container Image Scanner Plugin, Appbase Streams Docker Image, Arjohn Kampman Sesame Rdf Container, atomic-openshift, Avaya Aura Appliance Virtualization Platform Utilities, Azure Kubernetes, Azure Container Service Plugin, Bitnami Docker Container, Blackfire Docker Image, boot2docker, Chronograf Docker Image, Cisco 5000 Series Enterprise Network Compute System, Cisco Cisco UCS Director, Cisco Cisco UCS Director Express for Big Data, Cisco Firepower 4100, Cisco Firepower 4100 Next-Generation Firewall, Cisco Firepower 9300, Cisco Firepower 9300 Security Appliance, Cisco FX-OS, Cisco FXOS, Cisco Integrated Management Controller, Cisco Integrated Management Controller Supervisor, Cisco Nexus 1000V Switch for VMware vSphere, Cisco UCS B-Series Blade Server, Cisco UCS C-Series Rack Servers, Cisco UCS Central Software, Cisco UCS Director, Cisco UCS Director Express for Big Data, Cisco UCS Director Software, Cisco UCS Fabric Interconnect Software, Cisco UCS Invicta, Cisco UCS Manager, Cisco UCS Manager Software, Cisco Unified Computing, Cisco Unified Computing System, Cisco Unified Computing System 6120xp Fabric Interconnect, Cisco Unified Computing System Director, Cisco Unified Computing System Manager, Cisco Unified Computing System Platform Emulator, Cisco Unified Computing System Server, Cisco Unified Computing System Software, Cisco Virtualization Experience Client 6000, Cisco Virtualization Experience Client 6215 Servies, Cisco Virtualization Experience Media Engine, Citrix Hypervisor, Citrix XenServer, CloudShare Docker-Machine Plugin, Cloud Foundry Container Runtime, cockpit-ovirt, Composer Docker Image, containerd, containernetworking, containernetworking cni, Containers Storage, CoScale Agent Docker Image, Crux Linux Docker Image, Docker, Docker-CE, docker-cli-js, docker-compose-remote-api, docker-credential-helpers, docker-kong, Docker-Tester, docker2aci, Docker CLI, Docker Community Edition, Docker Desktop, Docker Desktop Community, Docker Desktop Community Edition, Docker docker-py, Docker Enterprise Edition, Docker Commons Plugin, Docker Docs Docker Image, Docker Engine, Docker Moby, Docker Notary, Docker Plugin, Docker Skeleton Runtime for Apache OpenWhisk, dtc-xen, eDreamers eDContainer, Eggdrop Docker image, ElasticBox Jenkins Kubernetes CI-CD Plugin, elasticsearch-operator-container, Elastic Cloud on Kubernetes, Elixir Docker Image, EMC VMware Server, Express Gateway Docker Image, F5 Container Ingress Service, Fabric8 Kubernetes Client, Fabrice Bellard QEMU, FullArmor HAPI File Share Mount Docker Image, Ghost Docker Image, Google Kubernetes Engine Plugin, Haproxy Docker Image, HP Network Virtualization, HP Service Virtualization, HPE BlueData EPIC Software Platform, HPE Ezmeral Container Platform, HPE Network Function Virtualization Director, IBM App Connect Enterprise Certified Container, IBM App Connect Enterprise Certified Container Dashboard UI, IBM Cloud Private Kubernetes API Server, IBM Data Virtualization on Cloud Pak for Data, IBM Rational Test Virtualization Server, IBM Rational Test Workbench, IBM Security Verify Access Docker, IBM System Storage Virtualization Engine Ts7700, Influxdb Docker Image, Instana Dynamic APM Docker Image, irssi Docker Image, kapacitor Docker Image, Kata Containers, Kata Containers, kdocker, Kong Docker Image, Kubernetes, kubernetes-nmstate-handler, Kubernetes ingress-nginx, Kubernetes Java Client, Kubernetes kube-controller-manager, Kubernetes kube-proxy, Kubernetes kubelet, Kubernetes kublet, Kubernetes CLI Plugin, Kubernetes Continuous Deploy Plugin, Kubernetes CRI-O, Kubernetes CSI Sidecar Container, Kubernetes Dashboard, Kubernetes Plugin, Kubernetes Steps Plugin, kvm qemu-kvm, Kvm Group qemu-kvm, Libcontainer, libvirt, libvirtd, Libvirt Agents Plugin, Libvirt Slaves Plugin, Linux Xen Elf Parser, Linuxcontainers Cgmanager, Linuxcontainers lxc, Linux Containers, Linux Foundation Xen, Linux Foundation XEN, Linux Foundation xen, Linux Foundation Xen Elf Parser, ManageIQ Enterprise Virtualization Manager, Memcached Docker Image, Microsoft Kubernetes Tools, Microvirt MEmu, Micro Focus Operations Bridge Containerized Suite, Mirantis Container Cloud Lens Extension, Mirantis Container Runtime, MongoDB Enterprise Kubernetes Operator, M&M fdtCONTAINER, NetApp Active IQ Unified Manager for VMware vSphere, NetApp Active IQ Unified Manager for VMware Windows, Notary Docker Image, Octopus Windows Docker Image, OpenShift, openshift, openshift-ansible, openshift-enterprise, openshift-origin-node Gem, OpenShift3, Openshift AMQ-Online, Openshift apb-base, Openshift API Server, Openshift Builder, Openshift Container Platform, Openshift Enmasse, Openshift haproxy cartridge, Openshift Installer, Openshift istio-rhel8-operator, OpenShift machine-config-operator, Openshift mariadb-apb, Openshift OAuth Server, Openshift ose-docker-builder, Openshift service-mesh, Openshift ServiceMesh, Openshift template-service-broker-operator, OpenShift Container Platform, OpenShift Container Platform 3, OpenShift Deployer Plugin, OpenShift Enterprise, OpenShift Enterprise source-to-image, OpenShift Origin, OpenShift Pipeline Plugin, Open Container Initiative umoci, Oracle Containers for J2EE, Oracle Virtualization, Oracle Virtualization VirtualBox, Oracle VM VirtualBox, oVirt, ovirt-aaa-jdbc-tool, ovirt-ansible-roles, ovirt-engine, ovirt-hosted-engine-setup, Ovirt Metrics, Ovirt Node, Ovirt SANLock, oVirt Engine, ovn-kubernetes, OVN-Kubernetes, Parallels Virtuozzo Containers, Pivotal Container Service, piwik Docker Image, Plone Docker Image, plugins, QEMU, Qemu, qemu, qemu-ga, QEMU KVM, Rabbitmq Docker Image, rakibtg Docker Dashboard, Red Hat Advanced Cluster Management for Kubernetes, Red Hat Ceph Storage, Red Hat containers-image, Red Hat Docker, Red Hat Enterprise Virtualization, Red Hat Enterprise Virtualization Hypervisor, Red Hat Enterprise Virtualization Manager, Red Hat JBoss BPM Suite, Red Hat JBoss Data Virtualization, Red Hat libvirt, Red Hat ManageIQ Enterprise Virtualization Manager, Red Hat OpenShift, Red Hat Openshift, Red Hat openshift, Red Hat openshift-clients, Red Hat OpenShift Container Platform 3, Red Hat Openshift Container Storage, Red Hat OpenShift Enterprise, Red Hat OpenShift Origin, registry Docker Image, rubygem-openshift-origin-controller, Software AG Terracotta Server OSS Docker Image, SolarWinds Virtualization Manager, Sonarqube Docker Image, spiped Docker Image, Storm Docker Image, Sun xVM VirtualBox, Symantec Workspace Streaming, Symantec Workspace Virtualization, Synology Docker, teamspeak Docker Image, Telegraf Docker Image, TIBCO BusinessConnect Container Edition, TIBCO Data Virtualization, TIBCO Data Virtualization for AWS Marketplace, Vault Docker Image, VMware ACE, VMware Cloud Foundation, VMware ESX, VMware ESXi, VMWare ESXi, VMware ESXi Server, VMware ESX Server, VMware Fusion, VMware Fusion Pro, VMware GSX Server, VMware Horizon Client, VMware Horizon View Agent, VMware Horizon View Client, VMware Player, vmware Player, VMWare Player, VMware Remote Console, vmware Server, VMware Server, VMware vCenter Server, VMware View, VMware VMRC, VMware vSphere Client, VMware vSphere Data Protection, VMware vSphere ESXi, VMware vSphere Integrated Containers, VMware vSphere Replication, VMware vSphere Web Client, VMware Workstation, vmware Workstation, VMWare Workstation, vmware workstation, VMware Workstation Player, VMware Workstation Pro, Weave Cloud Agent Docker Image, Webex Communications Webex Gpccontainer Activex Control, Xen, Xen Security, Xen XAPI, XenSource Xen, XenSource XenServer, XenSource Xen Para Virtualized Frame Buffer, XEN Carousel, Xen Orchestra, znc Docker Image

PublishedBaseTempVulnerabilityProductExpRemCTICVE
06/09/20224.94.8containerd ExecSync API resource consumptioncontainerdNot DefinedOfficial Fix0.03CVE-2022-31030
06/09/20225.55.3Xen Mapping memory corruptionXenNot DefinedOfficial Fix0.03CVE-2022-26364
06/09/20225.55.3Xen Mapping memory corruptionXenNot DefinedOfficial Fix0.09CVE-2022-26363
06/09/20224.64.4Xen typeref race conditionXenNot DefinedOfficial Fix0.22CVE-2022-26362
06/03/20225.55.5Docker-Tester Ports Entry docker-compose.yml os command injectionDocker-TesterNot DefinedNot Defined0.04CVE-2021-34079
05/26/20225.55.5Docker Desktop access controlDesktopNot DefinedNot Defined0.03CVE-2021-44719
05/12/20225.75.5QEMU HD Audio Device memory corruptionQEMUNot DefinedOfficial Fix0.02CVE-2021-3611
05/06/20225.95.9Kubernetes ingress-nginx Ingress Object information disclosureingress-nginxNot DefinedNot Defined0.10CVE-2021-25746
05/06/20225.95.9Kubernetes ingress-nginx Ingress Object information disclosureingress-nginxNot DefinedNot Defined0.05CVE-2021-25745
05/03/20225.75.5QEMU USB EHCI Controller Emulation use after freeQEMUNot DefinedOfficial Fix0.06CVE-2021-3750
04/30/20228.08.0QEMU QXL Display Device Emulation heap-based overflowQEMUNot DefinedNot Defined0.05CVE-2021-4207
04/30/20228.08.0QEMU QXL Display Device Emulation cursor_alloc heap-based overflowQEMUNot DefinedNot Defined0.02CVE-2021-4206
04/20/20225.55.5ovn-kubernetes Egress Network Policy access controlovn-kubernetesNot DefinedNot Defined0.06CVE-2022-0567
04/19/20223.83.7Oracle VM VirtualBox Core unknown vulnerabilityVM VirtualBoxNot DefinedOfficial Fix0.06CVE-2022-21488
04/19/20223.83.7Oracle VM VirtualBox Core information disclosureVM VirtualBoxNot DefinedOfficial Fix0.00CVE-2022-21487
04/19/20226.56.3Oracle VM VirtualBox Core denial of serviceVM VirtualBoxNot DefinedOfficial Fix0.03CVE-2022-21471
04/19/20226.76.5Oracle VM VirtualBox Core unknown vulnerabilityVM VirtualBoxNot DefinedOfficial Fix0.03CVE-2022-21465
04/19/20227.87.6Oracle VM VirtualBox Core Local Privilege EscalationVM VirtualBoxNot DefinedOfficial Fix0.03CVE-2022-21491
04/12/20225.55.3Red Hat OpenShift haproxy input validationOpenShiftNot DefinedOfficial Fix0.04CVE-2021-4047
04/05/20225.55.3Xen PCI Device memory corruptionXenNot DefinedOfficial Fix0.03CVE-2022-26361
04/05/20225.55.3Xen PCI Device memory corruptionXenNot DefinedOfficial Fix0.05CVE-2022-26360
04/05/20225.55.3Xen PCI Device memory corruptionXenNot DefinedOfficial Fix0.15CVE-2022-26359
04/05/20225.55.3Xen PCI Device memory corruptionXenNot DefinedOfficial Fix0.05CVE-2022-26358
04/05/20224.34.1Xen VT-d Domain ID Cleanup memory leakXenNot DefinedOfficial Fix0.32CVE-2022-26357
04/05/20222.62.5Xen VRAM Tracking XEN_DMOP_track_dirty_vram memory leakXenNot DefinedOfficial Fix0.03CVE-2022-26356
04/02/20226.36.3OpenShift Container Platform Machine Config Server improper authenticationOpenShift Container PlatformNot DefinedNot Defined0.06CVE-2021-20238
04/01/20225.45.3IBM App Connect Enterprise Certified Container Dashboard UI resource consumptionApp Connect Enterprise Certified Container Dashboard UINot DefinedOfficial Fix0.05CVE-2022-22404
03/29/20225.55.3QEMU Guest Driver pvrdma_cmd.c use after freeQEMUNot DefinedOfficial Fix0.00CVE-2022-1050
03/26/20226.36.0Docker Desktop Log File symlinkDesktopNot DefinedOfficial Fix0.08CVE-2022-26659
03/26/20223.53.4libvirt nwfilter virNWFilterObjListNumOfNWFilters lockinglibvirtNot DefinedOfficial Fix0.03CVE-2022-0897
03/26/20223.53.5libvirt libxl Driver lockinglibvirtNot DefinedNot Defined0.00CVE-2021-4147
03/26/20225.75.7QEMU Vmware Paravirtual RDMA Device memory corruptionQEMUNot DefinedNot Defined0.00CVE-2021-3582
03/24/20225.75.5QEMU virtio-net Device use after freeQEMUNot DefinedOfficial Fix0.04CVE-2021-3748
03/17/20223.53.4QEMU vhost-vsock Device release of resourceQEMUNot DefinedOfficial Fix0.02CVE-2022-26354
03/17/20223.53.4QEMU virtio-net Device release of resourceQEMUNot DefinedNot Defined0.00CVE-2022-26353
03/16/20225.75.2QEMU e1000 NIC Emulator process_tx_desc infinite loopQEMUNot DefinedOfficial Fix0.04CVE-2021-20257
03/16/20224.34.3Kubernetes Continuous Deploy Plugin cross-site request forgeryKubernetes Continuous Deploy PluginNot DefinedNot Defined0.09CVE-2022-27210
03/16/20223.53.5Kubernetes Continuous Deploy Plugin authorizationKubernetes Continuous Deploy PluginNot DefinedNot Defined0.04CVE-2022-27211
03/16/20223.53.5Kubernetes Continuous Deploy Plugin authorizationKubernetes Continuous Deploy PluginNot DefinedNot Defined0.04CVE-2022-27209
03/16/20223.53.5Kubernetes Continuous Deploy Plugin path traversalKubernetes Continuous Deploy PluginNot DefinedNot Defined0.04CVE-2022-27208
03/15/20223.83.7IBM Data Virtualization on Cloud Pak for Data Data Masking Rule information disclosureData Virtualization on Cloud Pak for DataNot DefinedOfficial Fix0.09CVE-2021-38971
03/11/20223.53.4Xen Grant Table handler denial of serviceXenNot DefinedOfficial Fix0.04CVE-2022-23042
03/11/20225.55.3Xen Grant Table handler access controlXenNot DefinedOfficial Fix0.11CVE-2022-23041
03/11/20225.55.3Xen Grant Table handler access controlXenNot DefinedOfficial Fix0.13CVE-2022-23040
03/11/20225.55.3Xen Grant Table handler access controlXenNot DefinedOfficial Fix0.05CVE-2022-23039
03/11/20225.55.3Xen Grant Table handler access controlXenNot DefinedOfficial Fix0.03CVE-2022-23038
03/11/20225.55.3Xen Grant Table handler access controlXenNot DefinedOfficial Fix0.03CVE-2022-23037
03/11/20225.55.3Xen Grant Table handler access controlXenNot DefinedOfficial Fix0.04CVE-2022-23036
03/04/20225.75.7QEMU ATI VGA Device Emulation ati_2d_blt out-of-bounds writeQEMUNot DefinedNot Defined0.07CVE-2021-3638
03/03/20226.46.3containerd CRI information disclosurecontainerdNot DefinedOfficial Fix0.00CVE-2022-23648

2061 more entries are not shown

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!