SLOF-0:20210217-1.module+el8.6.0+14480+c0a3aa0f.src (virt-devel:rhel) as a component of Red Hat CodeReady Linux Builder EUS (v.8.6)

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical4high2medium0low

updated 2026-10-28

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-1018US	medium5.5	5.55% (93rd)	—	no fix	2023-02-28	—
CVE-2023-3354US	high7.5	1.61% (76th)	—	no fix	2023-07-11	—
CVE-2023-1017US	high7.8	1.38% (72nd)	—	no fix	2023-02-28	—
CVE-2021-3750US	high8.2	0.51% (44th)	—	no fix	2022-05-02	—
CVE-2022-40284US	high7.8	0.36% (29th)	—	no fix	2022-11-06	—
CVE-2023-3019US	medium6.5	0.32% (25th)	—	no fix	2023-07-24	—

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-19CWE-191 CVEs
CWE-476NULL Pointer Dereference1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.