Virtualization Software 漏洞

时间轴

供应商

产品

Oracle VM VirtualBox325
QEMU288
Xen211
VMware Workstation162
Linux Foundation Xen122

修正

Official Fix1588
Temporary Fix0
Workaround14
Unavailable7
Not Defined497

易受攻击性

High16
Functional2
Proof-of-Concept155
Unproven192
Not Defined1741

访问向量

Not Defined0
Physical12
Local1092
Adjacent243
Network759

身份验证

Not Defined0
High228
Low1006
None872

用户交互

Not Defined1
Required122
None1983

C3BM Index

CVSSv3 Base

≤10
≤20
≤329
≤4220
≤5271
≤6541
≤7390
≤8322
≤9216
≤10117

CVSSv3 Temp

≤10
≤20
≤341
≤4245
≤5336
≤6530
≤7401
≤8311
≤9171
≤1071

VulDB

≤10
≤22
≤349
≤4343
≤5263
≤6565
≤7275
≤8300
≤9194
≤10115

NVD

≤10
≤20
≤38
≤444
≤571
≤6231
≤7225
≤8232
≤9201
≤1092

CNA

≤10
≤20
≤32
≤44
≤54
≤65
≤77
≤88
≤94
≤101

供应商

≤10
≤20
≤34
≤412
≤57
≤627
≤734
≤850
≤972
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤100

零日攻击

<1k102
<2k282
<5k509
<10k495
<25k578
<50k132
<100k7
≥100k1

本日攻击

<1k1531
<2k159
<5k209
<10k129
<25k78
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (299): Adminer Docker Image, Alauda Kubernetes Support Plugin, Alpine Linux Docker Image, Amos Benari rbovirt, Anchore Container Image Scanner Plugin, Appbase Streams Docker Image, Arjohn Kampman Sesame Rdf Container, atomic-openshift, Avaya Aura Appliance Virtualization Platform Utilities, Azure Kubernetes, Azure Container Service Plugin, Bitnami Docker Container, Blackfire Docker Image, boot2docker, Chronograf Docker Image, Cisco 5000 Series Enterprise Network Compute System, Cisco Cisco UCS Director, Cisco Cisco UCS Director Express for Big Data, Cisco Firepower 4100, Cisco Firepower 4100 Next-Generation Firewall, Cisco Firepower 9300, Cisco Firepower 9300 Security Appliance, Cisco FX-OS, Cisco FXOS, Cisco Integrated Management Controller, Cisco Integrated Management Controller Supervisor, Cisco Nexus 1000V Switch for VMware vSphere, Cisco UCS B-Series Blade Server, Cisco UCS C-Series Rack Servers, Cisco UCS Central Software, Cisco UCS Director, Cisco UCS Director Express for Big Data, Cisco UCS Director Software, Cisco UCS Fabric Interconnect Software, Cisco UCS Invicta, Cisco UCS Manager, Cisco UCS Manager Software, Cisco Unified Computing, Cisco Unified Computing System, Cisco Unified Computing System 6120xp Fabric Interconnect, Cisco Unified Computing System Director, Cisco Unified Computing System Manager, Cisco Unified Computing System Platform Emulator, Cisco Unified Computing System Server, Cisco Unified Computing System Software, Cisco Virtualization Experience Client 6000, Cisco Virtualization Experience Client 6215 Servies, Cisco Virtualization Experience Media Engine, Citrix Hypervisor, Citrix XenServer, CloudShare Docker-Machine Plugin, Cloud Foundry Container Runtime, cockpit-ovirt, Composer Docker Image, containerd, containernetworking, containernetworking cni, Containers Storage, CoScale Agent Docker Image, Crux Linux Docker Image, Docker, Docker-CE, docker-cli-js, docker-compose-remote-api, docker-credential-helpers, docker-kong, docker2aci, Docker CLI, Docker Community Edition, Docker Desktop, Docker Desktop Community, Docker Desktop Community Edition, Docker docker-py, Docker Enterprise Edition, Docker Commons Plugin, Docker Docs Docker Image, Docker Engine, Docker Moby, Docker Notary, Docker Plugin, Docker Skeleton Runtime for Apache OpenWhisk, dtc-xen, eDreamers eDContainer, Eggdrop Docker image, ElasticBox Jenkins Kubernetes CI-CD Plugin, elasticsearch-operator-container, Elastic Cloud on Kubernetes, Elixir Docker Image, EMC VMware Server, Express Gateway Docker Image, F5 Container Ingress Service, Fabric8 Kubernetes Client, Fabrice Bellard QEMU, FullArmor HAPI File Share Mount Docker Image, Ghost Docker Image, Google Kubernetes Engine Plugin, Haproxy Docker Image, HP Network Virtualization, HP Service Virtualization, HPE BlueData EPIC Software Platform, HPE Ezmeral Container Platform, HPE Network Function Virtualization Director, IBM App Connect Enterprise Certified Container, IBM App Connect Enterprise Certified Container Dashboard UI, IBM Cloud Private Kubernetes API Server, IBM Data Virtualization on Cloud Pak for Data, IBM Rational Test Virtualization Server, IBM Rational Test Workbench, IBM Security Verify Access Docker, IBM System Storage Virtualization Engine Ts7700, Influxdb Docker Image, Instana Dynamic APM Docker Image, irssi Docker Image, kapacitor Docker Image, Kata Containers, Kata Containers, kdocker, Kong Docker Image, Kubernetes, kubernetes-nmstate-handler, Kubernetes ingress-nginx, Kubernetes Java Client, Kubernetes kube-controller-manager, Kubernetes kube-proxy, Kubernetes kubelet, Kubernetes kublet, Kubernetes CLI Plugin, Kubernetes Continuous Deploy Plugin, Kubernetes CRI-O, Kubernetes CSI Sidecar Container, Kubernetes Dashboard, Kubernetes Plugin, Kubernetes Steps Plugin, kvm qemu-kvm, Kvm Group qemu-kvm, Libcontainer, libvirt, libvirtd, Libvirt Agents Plugin, Libvirt Slaves Plugin, Linux Xen Elf Parser, Linuxcontainers Cgmanager, Linuxcontainers lxc, Linux Containers, Linux Foundation Xen, Linux Foundation XEN, Linux Foundation xen, Linux Foundation Xen Elf Parser, ManageIQ Enterprise Virtualization Manager, Memcached Docker Image, Microsoft Kubernetes Tools, Microvirt MEmu, Micro Focus Operations Bridge Containerized Suite, Mirantis Container Cloud Lens Extension, Mirantis Container Runtime, MongoDB Enterprise Kubernetes Operator, M&M fdtCONTAINER, NetApp Active IQ Unified Manager for VMware vSphere, NetApp Active IQ Unified Manager for VMware Windows, Notary Docker Image, Octopus Windows Docker Image, OpenShift, openshift, openshift-ansible, openshift-enterprise, openshift-origin-node Gem, OpenShift3, Openshift AMQ-Online, Openshift apb-base, Openshift API Server, Openshift Builder, Openshift Container Platform, Openshift Enmasse, Openshift haproxy cartridge, Openshift Installer, Openshift istio-rhel8-operator, OpenShift machine-config-operator, Openshift mariadb-apb, Openshift OAuth Server, Openshift ose-docker-builder, Openshift service-mesh, Openshift ServiceMesh, Openshift template-service-broker-operator, OpenShift Container Platform, OpenShift Container Platform 3, OpenShift Deployer Plugin, OpenShift Enterprise, OpenShift Enterprise source-to-image, OpenShift Origin, OpenShift Pipeline Plugin, Open Container Initiative umoci, Oracle Containers for J2EE, Oracle Virtualization, Oracle Virtualization VirtualBox, Oracle VM VirtualBox, oVirt, ovirt-aaa-jdbc-tool, ovirt-ansible-roles, ovirt-engine, ovirt-hosted-engine-setup, Ovirt Metrics, Ovirt Node, Ovirt SANLock, oVirt Engine, ovn-kubernetes, OVN-Kubernetes, Parallels Virtuozzo Containers, Pivotal Container Service, piwik Docker Image, Plone Docker Image, plugins, QEMU, Qemu, qemu, qemu-ga, QEMU KVM, Rabbitmq Docker Image, rakibtg Docker Dashboard, Red Hat Advanced Cluster Management for Kubernetes, Red Hat Ceph Storage, Red Hat containers-image, Red Hat Docker, Red Hat Enterprise Virtualization, Red Hat Enterprise Virtualization Hypervisor, Red Hat Enterprise Virtualization Manager, Red Hat JBoss BPM Suite, Red Hat JBoss Data Virtualization, Red Hat libvirt, Red Hat ManageIQ Enterprise Virtualization Manager, Red Hat OpenShift, Red Hat Openshift, Red Hat openshift, Red Hat openshift-clients, Red Hat OpenShift Container Platform 3, Red Hat Openshift Container Storage, Red Hat OpenShift Enterprise, Red Hat OpenShift Origin, registry Docker Image, rubygem-openshift-origin-controller, Software AG Terracotta Server OSS Docker Image, SolarWinds Virtualization Manager, Sonarqube Docker Image, spiped Docker Image, Storm Docker Image, Sun xVM VirtualBox, Symantec Workspace Streaming, Symantec Workspace Virtualization, Synology Docker, teamspeak Docker Image, Telegraf Docker Image, TIBCO BusinessConnect Container Edition, TIBCO Data Virtualization, TIBCO Data Virtualization for AWS Marketplace, Vault Docker Image, VMware ACE, VMware Cloud Foundation, VMware ESX, VMware ESXi, VMWare ESXi, VMware ESXi Server, VMware ESX Server, VMware Fusion, VMware Fusion Pro, VMware GSX Server, VMware Horizon Client, VMware Horizon View Agent, VMware Horizon View Client, VMware Player, vmware Player, VMWare Player, VMware Remote Console, vmware Server, VMware Server, VMware vCenter Server, VMware View, VMware VMRC, VMware vSphere Client, VMware vSphere Data Protection, VMware vSphere ESXi, VMware vSphere Integrated Containers, VMware vSphere Replication, VMware vSphere Web Client, VMware Workstation, vmware Workstation, VMWare Workstation, vmware workstation, VMware Workstation Player, VMware Workstation Pro, Weave Cloud Agent Docker Image, Webex Communications Webex Gpccontainer Activex Control, Xen, Xen Security, Xen XAPI, XenSource Xen, XenSource XenServer, XenSource Xen Para Virtualized Frame Buffer, XEN Carousel, Xen Orchestra, znc Docker Image

已发布BaseTemp漏洞产品修正CTICVE
2022-05-265.55.5Docker Desktop 权限升级DesktopNot DefinedNot Defined1.26-CVE-2021-44719
2022-05-125.75.5QEMU HD Audio Device 内存损坏QEMUNot DefinedOfficial Fix0.03CVE-2021-3611
2022-05-065.95.9Kubernetes ingress-nginx Ingress Object 信息公开ingress-nginxNot DefinedNot Defined0.03CVE-2021-25746
2022-05-065.95.9Kubernetes ingress-nginx Ingress Object 信息公开ingress-nginxNot DefinedNot Defined0.03CVE-2021-25745
2022-05-035.75.5QEMU USB EHCI Controller Emulation 内存损坏QEMUNot DefinedOfficial Fix0.08CVE-2021-3750
2022-04-308.08.0QEMU QXL Display Device Emulation 内存损坏QEMUNot DefinedNot Defined0.00CVE-2021-4207
2022-04-308.08.0QEMU QXL Display Device Emulation cursor_alloc 内存损坏QEMUNot DefinedNot Defined0.04CVE-2021-4206
2022-04-205.55.5ovn-kubernetes Egress Network Policy 权限升级ovn-kubernetesNot DefinedNot Defined0.05CVE-2022-0567
2022-04-193.83.7Oracle VM VirtualBox Core 未知漏洞VM VirtualBoxNot DefinedOfficial Fix0.08CVE-2022-21488
2022-04-193.83.7Oracle VM VirtualBox Core 信息公开VM VirtualBoxNot DefinedOfficial Fix0.06CVE-2022-21487
2022-04-196.56.3Oracle VM VirtualBox Core 拒绝服务VM VirtualBoxNot DefinedOfficial Fix0.00CVE-2022-21471
2022-04-196.76.5Oracle VM VirtualBox Core 未知漏洞VM VirtualBoxNot DefinedOfficial Fix0.04CVE-2022-21465
2022-04-197.87.6Oracle VM VirtualBox Core Local Privilege EscalationVM VirtualBoxNot DefinedOfficial Fix0.05CVE-2022-21491
2022-04-125.55.3Red Hat OpenShift haproxy 权限升级OpenShiftNot DefinedOfficial Fix0.00CVE-2021-4047
2022-04-055.55.3Xen PCI Device 内存损坏XenNot DefinedOfficial Fix0.00CVE-2022-26361
2022-04-055.55.3Xen PCI Device 内存损坏XenNot DefinedOfficial Fix0.06CVE-2022-26360
2022-04-055.55.3Xen PCI Device 内存损坏XenNot DefinedOfficial Fix0.03CVE-2022-26359
2022-04-055.55.3Xen PCI Device 内存损坏XenNot DefinedOfficial Fix0.18CVE-2022-26358
2022-04-054.34.1Xen VT-d Domain ID Cleanup 拒绝服务XenNot DefinedOfficial Fix0.03CVE-2022-26357
2022-04-052.62.5Xen VRAM Tracking XEN_DMOP_track_dirty_vram 拒绝服务XenNot DefinedOfficial Fix0.03CVE-2022-26356
2022-04-026.36.3OpenShift Container Platform Machine Config Server 弱身份验证OpenShift Container PlatformNot DefinedNot Defined0.03CVE-2021-20238
2022-04-015.45.3IBM App Connect Enterprise Certified Container Dashboard UI 拒绝服务App Connect Enterprise Certified Container Dashboard UINot DefinedOfficial Fix0.06CVE-2022-22404
2022-03-295.55.3QEMU Guest Driver pvrdma_cmd.c 内存损坏QEMUNot DefinedOfficial Fix0.03CVE-2022-1050
2022-03-266.36.0Docker Desktop Log File 权限升级DesktopNot DefinedOfficial Fix0.03CVE-2022-26659
2022-03-263.53.4libvirt nwfilter virNWFilterObjListNumOfNWFilters 拒绝服务libvirtNot DefinedOfficial Fix0.00CVE-2022-0897
2022-03-263.53.5libvirt libxl Driver 拒绝服务libvirtNot DefinedNot Defined0.03CVE-2021-4147
2022-03-265.75.7QEMU Vmware Paravirtual RDMA Device 内存损坏QEMUNot DefinedNot Defined0.03CVE-2021-3582
2022-03-245.75.5QEMU virtio-net Device 内存损坏QEMUNot DefinedOfficial Fix0.05CVE-2021-3748
2022-03-173.53.4QEMU vhost-vsock Device 拒绝服务QEMUNot DefinedOfficial Fix0.03CVE-2022-26354
2022-03-173.53.4QEMU virtio-net Device 拒绝服务QEMUNot DefinedNot Defined0.03CVE-2022-26353
2022-03-165.75.2QEMU e1000 NIC Emulator process_tx_desc 拒绝服务QEMUNot DefinedOfficial Fix0.04CVE-2021-20257
2022-03-164.34.3Kubernetes Continuous Deploy Plugin 跨网站请求伪造Kubernetes Continuous Deploy PluginNot DefinedNot Defined0.03CVE-2022-27210
2022-03-163.53.5Kubernetes Continuous Deploy Plugin 权限升级Kubernetes Continuous Deploy PluginNot DefinedNot Defined0.03CVE-2022-27211
2022-03-163.53.5Kubernetes Continuous Deploy Plugin 权限升级Kubernetes Continuous Deploy PluginNot DefinedNot Defined0.07CVE-2022-27209
2022-03-163.53.5Kubernetes Continuous Deploy Plugin 目录遍历Kubernetes Continuous Deploy PluginNot DefinedNot Defined0.04CVE-2022-27208
2022-03-153.83.7IBM Data Virtualization on Cloud Pak for Data Data Masking Rule 信息公开Data Virtualization on Cloud Pak for DataNot DefinedOfficial Fix0.03CVE-2021-38971
2022-03-113.53.4Xen Grant Table handler 拒绝服务XenNot DefinedOfficial Fix0.09CVE-2022-23042
2022-03-115.55.3Xen Grant Table handler 权限升级XenNot DefinedOfficial Fix0.11CVE-2022-23041
2022-03-115.55.3Xen Grant Table handler 权限升级XenNot DefinedOfficial Fix0.08CVE-2022-23040
2022-03-115.55.3Xen Grant Table handler 权限升级XenNot DefinedOfficial Fix0.04CVE-2022-23039
2022-03-115.55.3Xen Grant Table handler 权限升级XenNot DefinedOfficial Fix0.03CVE-2022-23038
2022-03-115.55.3Xen Grant Table handler 权限升级XenNot DefinedOfficial Fix0.03CVE-2022-23037
2022-03-115.55.3Xen Grant Table handler 权限升级XenNot DefinedOfficial Fix0.03CVE-2022-23036
2022-03-045.75.7QEMU ATI VGA Device Emulation ati_2d_blt 内存损坏QEMUNot DefinedNot Defined0.04CVE-2021-3638
2022-03-036.46.3containerd CRI 信息公开containerdNot DefinedOfficial Fix0.03CVE-2022-23648
2022-03-033.53.4libvirt API virStoragePoolLookupByTargetPath 拒绝服务libvirtNot DefinedOfficial Fix0.08CVE-2021-3667
2022-03-034.64.4libvirt SELinux MCS Category Pair 权限升级libvirtNot DefinedOfficial Fix0.04CVE-2021-3631
2022-02-255.75.5QEMU Paravirtual RDMA Device 拒绝服务QEMUNot DefinedOfficial Fix0.05CVE-2021-3608
2022-02-255.75.5QEMU Paravirtual RDMA Device 拒绝服务QEMUNot DefinedOfficial Fix0.04CVE-2021-3607
2022-02-196.56.4Docker Desktop 权限升级DesktopNot DefinedOfficial Fix0.05CVE-2022-25365

2056 更多条目未显示

Might our Artificial Intelligence support you?

Check our Alexa App!