[{"CVE":"CVE-2019-9755","severity":"low","public_date":"2019-03-21T00:00:00Z","advisories":["RHBA-2019:3723","RHSA-2019:3345","RHSA-2019:2308"],"bugzilla":"1691624","bugzilla_description":"CVE-2019-9755 ntfs-3g: heap-based buffer overflow leads to local root privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["libguestfs-winsupport-0:7.2-3.el7","virt:rhel-8010020190916153839.cdc1202b"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9755.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2015-8869","severity":"moderate","public_date":"2016-04-28T00:00:00Z","advisories":["RHSA-2017:0565","RHSA-2016:2576","RHSA-2016:1296","RHSA-2017:0564"],"bugzilla":"1332090","bugzilla_description":"CVE-2015-8869 ocaml: sizes arguments are sign-extended from 32 to 64 bits","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-194","affected_packages":["libguestfs-1:1.32.7-3.el7","ocaml-0:3.11.2-5.el6","libguestfs-1:1.20.11-20.el6","ocaml-0:4.01.0-22.7.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8869.json"},{"CVE":"CVE-2015-3202","severity":"low","public_date":"2015-05-21T00:00:00Z","advisories":[],"bugzilla":"1224103","bugzilla_description":"CVE-2015-3202 fuse: incorrect filtering of environment variables leading to privilege escalation","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3202.json"},{"CVE":"CVE-2013-4419","severity":"moderate","public_date":"2013-10-17T00:00:00Z","advisories":["RHSA-2013:1536"],"bugzilla":"1016960","bugzilla_description":"CVE-2013-4419 libguestfs: insecure temporary directory handling for guestfish's network socket","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-377","affected_packages":["libguestfs-1:1.20.11-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4419.json"},{"CVE":"CVE-2013-2124","severity":"moderate","public_date":"2013-05-28T00:00:00Z","advisories":[],"bugzilla":"968306","bugzilla_description":"CVE-2013-2124 libguestfs: DoS (abort) due to a double free flaw when inspecting certain guest files / images","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2124.json"},{"CVE":"CVE-2012-2690","severity":"low","public_date":"2012-02-08T00:00:00Z","advisories":["RHSA-2012:0774"],"bugzilla":"831117","bugzilla_description":"CVE-2012-2690 libguestfs: virt-edit creates a new file, when it is used leading to loss of file attributes (permissions, owner, SELinux context etc.)","cvss_score":1.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":["libguestfs-1:1.16.19-1.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2690.json"},{"CVE":"CVE-2010-3851","severity":"low","public_date":"2010-10-14T00:00:00Z","advisories":["RHSA-2011:0586"],"bugzilla":"643958","bugzilla_description":"CVE-2010-3851 libguestfs: missing disk format specifier when adding a disk","cvss_score":1.5,"cvss_scoring_vector":"AV:L/AC:M/Au:S/C:P/I:N/A:N","CWE":null,"affected_packages":["libguestfs-1:1.7.17-17.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3851.json"}]