Oracle Linux vulnerabilities

• oracle linux An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an... CVE-2026-35233 Fix available 4.4 MediumMay 1, 2026
• oracle linux An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF... CVE-2026-21996 Fix available 3.3 LowMay 1, 2026
• oracle linux A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names. CVE-2026-21991 Fix available 5.5 MediumMarch 16, 2026
• debian linux, linux kernel, systemd project systemd +14 more +16 more Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump CVE-2025-4598 Fix available 4.7 MediumMay 29, 2025
• oracle linux, vm, vm server +2 more In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options,... CVE-2023-22024 5.5 MediumSeptember 20, 2023
• oracle linux A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash... CVE-2022-21385 Fix available 6.2 MediumAugust 29, 2022
• oracle linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 more Important: kernel-rt security and bug fix update CVE-2022-21505 Fix available 6.7 MediumJuly 19, 2022
• oracle linux The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted... CVE-2022-21504 5.5 MediumJune 14, 2022
• debian linux, oracle vm +1 more KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during... CVE-2022-21499 Fix available 6.7 MediumMay 24, 2022
• oracle linux, engineered systems utilities +1 more Vulnerability in Oracle Linux (component: OSwatcher). Supported versions that are affected are 7... CVE-2021-2464 7.8 HighSeptember 24, 2021
• dogtagpki, fedoraproject fedora, oracle linux +9 more +11 more A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores... CVE-2021-3551 Fix available 7.8 HighJune 3, 2021
• qemu, canonical ubuntu linux, debian linux +1 more +3 more Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data... CVE-2018-17962 Fix available 7.5 HighOctober 9, 2018
• linux kernel, oracle linux, vm server +2 more The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of... CVE-2016-7039 Fix available 7.5 HighOctober 10, 2016
• oracle linux Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to... CVE-2016-0617 Fix available 5.5 MediumSeptember 30, 2016
• isc bind, hp hp-ux, oracle linux +2 more +4 more buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11... CVE-2016-2776 Public exploitFix available EPSS 89.5% 7.5 HighSeptember 27, 2016
• libarchive, oracle linux, redhat enterprise linux desktop +7 more +9 more The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non... CVE-2016-5418 Fix available 7.5 HighSeptember 21, 2016
• openssl, oracle linux, solaris +2 more The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the... CVE-2016-6302 Fix available EPSS 27.8% 7.5 HighSeptember 16, 2016
• openssl, hp icewall federation agent, icewall mcrp +3 more +5 more The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate... CVE-2016-2182 Fix available EPSS 44.2% 9.8 CriticalSeptember 16, 2016
• openssl, oracle linux +1 more The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use... CVE-2016-2181 Fix available EPSS 22.6% 7.5 HighSeptember 16, 2016
• openssl, oracle linux +1 more The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue... CVE-2016-2179 Fix available EPSS 26.6% 7.5 HighSeptember 16, 2016
• libarchive, oracle linux, redhat enterprise linux desktop +6 more +8 more libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows... CVE-2016-7166 Fix available 5.5 MediumSeptember 10, 2016
• freeipa, fedoraproject fedora, oracle linux +2 more The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which... CVE-2016-5404 Fix available 6.5 MediumSeptember 7, 2016
• linux kernel, oracle linux, vm server +2 more The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after... CVE-2016-6198 Fix available 5.5 MediumAugust 6, 2016
• linux kernel, oracle linux, vm server +2 more fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does... CVE-2016-6197 Fix available 5.5 MediumAugust 6, 2016
• mozilla firefox, oracle linux +1 more Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers... CVE-2016-5265 Fix available 5.5 MediumAugust 3, 2016
• mozilla firefox, oracle linux +1 more Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in... CVE-2016-5264 Fix available 8.8 HighAugust 3, 2016
• mozilla firefox, oracle linux +1 more The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45... CVE-2016-5263 Fix available 8.8 HighAugust 3, 2016
• mozilla firefox, oracle linux +1 more Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler... CVE-2016-5262 Fix available 6.1 MediumAugust 3, 2016
• mozilla firefox, oracle linux +1 more Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox... CVE-2016-5259 Fix available 8.8 HighAugust 3, 2016
• mozilla firefox, oracle linux +1 more Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and... CVE-2016-5258 Fix available 8.8 HighAugust 3, 2016
• mozilla firefox, oracle linux +1 more Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before... CVE-2016-5254 Fix available 9.8 CriticalAugust 3, 2016
• mozilla firefox, oracle linux +1 more Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before... CVE-2016-5252 Fix available 8.8 HighAugust 3, 2016
• mozilla firefox, oracle linux +1 more Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media... CVE-2016-2837 Fix available 6.3 MediumAugust 3, 2016
• openssl, oracle linux +1 more The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time... CVE-2016-2180 Fix available EPSS 30.0% 7.5 HighJuly 31, 2016
• qemu, canonical ubuntu linux, debian linux +9 more +11 more The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to... CVE-2016-5403 Fix available 5.5 MediumJuly 30, 2016
• oracle linux, redhat enterprise linux server, enterprise linux workstation +2 more Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package... CVE-2016-5408 Fix available 9.8 CriticalJuly 22, 2016
• mariadb, oracle mysql, ibm powerkvm +8 more +10 more Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and... CVE-2016-5444 Fix available 3.7 LowJuly 21, 2016
• mariadb, oracle mysql, ibm powerkvm +2 more +4 more Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and... CVE-2016-3452 Fix available 3.7 LowJuly 21, 2016
• libarchive, oracle linux +1 more Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to... CVE-2016-6250 Fix available 8.6 HighJuly 21, 2016
• oracle jdk, jre, linux +2 more Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote... CVE-2016-3610 Fix available 9.6 CriticalJuly 21, 2016
• oracle jdk, jre, linux +2 more Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows... CVE-2016-3606 Fix available 9.6 CriticalJuly 21, 2016
• oracle jdk, jre, linux +2 more Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote... CVE-2016-3598 Fix available 9.6 CriticalJuly 21, 2016
• oracle jdk, jre, linux +2 more Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote... CVE-2016-3587 Fix available 9.6 CriticalJuly 21, 2016
• oracle jdk, jre, linux +2 more Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91... CVE-2016-3550 Fix available 4.3 MediumJuly 21, 2016
• oracle jrockit, jdk, jre +1 more +3 more Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and... CVE-2016-3508 Fix available 5.3 MediumJuly 21, 2016
• oracle jrockit, jdk, jre +1 more +3 more Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and... CVE-2016-3500 Fix available 5.3 MediumJuly 21, 2016
• oracle jdk, jre, linux +2 more Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91... CVE-2016-3458 Fix available 4.3 MediumJuly 21, 2016
• mariadb, oracle mysql, canonical ubuntu linux +8 more +10 more Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and... CVE-2016-5440 Fix available 4.9 MediumJuly 20, 2016
• mariadb, oracle mysql, canonical ubuntu linux +2 more +4 more Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and... CVE-2016-3615 Fix available 5.3 MediumJuly 20, 2016
• mariadb, oracle mysql, canonical ubuntu linux +2 more +4 more Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and... CVE-2016-3521 Fix available EPSS 10.4% 6.5 MediumJuly 20, 2016
• Show olderLoading…