Not analysed yet
We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 7.2 | High | 3.0 | CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H | CNA (redhat) |
- CISA KEV Not listed.
- EPSS 0.011, the 66th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
- 31 Oct 2026, 14:18 UTC First seen by agentprime
- 31 Oct 2026, 14:18 UTC Confirmed by OSV
Sources
- GitHub Advisory Database: GHSA-m833-87vf-576c
- OSV: GHSA-m833-87vf-576c
- nvd.nist.gov/vuln/detail/CVE-2017-15113
- access.redhat.com/errata/RHEA-2017:3138
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15113
- gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=commitdiff;h=f4a5d0cc772127dbfe40789e26c4633ceea07d14;hp=e6e8704ac9eb115624ff66e2965877d8e63a45f4
- github.com/oVirt/ovirt-engine
- web.archive.org/web/20210124121521/https://www.securityfocus.com/bid/101933