{"items":[{"id":"CVE-2018-10840","published":"2018-07-16T20:00:00.000Z","updated":"2024-08-05T07:46:47.078Z","title":"Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4_xattr_set_entry() function. An attacker could exploit this by operating…","severity":"MEDIUM","score":5.2,"vendor":"kernel","product":"heap-based buffer overflow in fs/ext4/xattr.c","kev":false,"epss":0.0067,"kevAdded":null,"exploit":false},{"id":"CVE-2016-9604","published":"2018-07-11T13:00:00.000Z","updated":"2024-08-06T02:59:03.056Z","title":"It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or…","severity":"MEDIUM","score":4.4,"vendor":"kernel","product":"security","kev":false,"epss":0.00271,"kevAdded":null,"exploit":false},{"id":"CVE-2018-1108","published":"2018-05-21T21:00:00.000Z","updated":"2024-08-05T03:51:48.721Z","title":"kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot…","severity":"MEDIUM","score":5.9,"vendor":"kernel","product":"drivers","kev":false,"epss":0.01698,"kevAdded":null,"exploit":false},{"id":"CVE-2018-1087","published":"2018-05-15T16:00:00.000Z","updated":"2024-08-05T03:51:48.239Z","title":"kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux…","severity":"HIGH","score":8,"vendor":"kernel","product":"KVM","kev":false,"epss":0.00743,"kevAdded":null,"exploit":false},{"id":"CVE-2018-1118","published":"2018-05-10T22:00:00.000Z","updated":"2024-08-05T03:51:48.923Z","title":"Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating system in the…","severity":"LOW","score":2.3,"vendor":"kernel","product":"vhost","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false}]}