kubevirt (SUSE:Linux Enterprise Module for Containers 15 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Containers 15 SP3 package kubevirt, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2022-1996 — CVSS 9.1 (critical): Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
• CVE-2022-1798 — CVSS 8.7 (high): A path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt…
• CVE-2021-43565 — CVSS 7.5 (high): The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.
• CVE-2022-29162 — CVSS 5.9 (medium): runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to…
• CVE-2021-20286 — CVSS 2.7 (low): A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service.