Skip to contentRed Hat Enterprise Linux vulnerabilities
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 morePossible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.cCVE-2023-5158Fix available6.5 Medium
- gnu glibc, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGlibc: dos due to memory leak in getaddrinfo.cCVE-2023-5156Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: deadlock in ksmbd_find_crypto_ctx()CVE-2023-32253Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd brute force delay bypass via asynchronous requestsCVE-2023-32251Fix available3.7 Low
- mariadb, fedoraproject fedora, red hat enterprise linux 7 +18 more +20 moreMariadb: node crashes with transport endpoint is not connected mysqld got signal 6CVE-2023-5157Fix available7.5 High
- gnu glibc, fedoraproject fedora, red hat enterprise linux 6 +28 more +30 moreGlibc: potential use-after-free in getaddrinfo()CVE-2023-4806Fix available5.9 Medium
- gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 moreGlibc: stack read overflow in getaddrinfo in no-aaaa modeCVE-2023-4527Fix available6.5 Medium
- gnu binutils, fedora extra packages for enterprise linux 7, extra packages for enterprise linux 8 +7 more +9 moreLocal variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitializedCVE-2023-25586Fix available4.7 Medium
- qemu, red hat enterprise linux 9, redhat enterprise linux +7 more +9 moreDma reentrancy issue (incomplete fix for cve-2021-3750)CVE-2023-2680Fix available7.5 High
- shadow-maint shadow-utils, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreShadow-utils: possible password leak during passwd(1) changeCVE-2023-4641Fix available4.7 Medium
- gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 moreGlibc: potential use-after-free in gaih_inet()CVE-2023-4813Public exploitFix available5.9 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreUse after free race between mbind() and vma-locked page faultCVE-2023-4611Fix available7.0 High
- debian linux, linux kernel, fedora +5 more +7 moreKernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.cCVE-2023-4569Fix available5.5 Medium
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: challenge-response protocol bypass during agent registrationCVE-2023-38201Fix available6.5 Medium
- artifex ghostscript, red hat enterprise linux 8, redhat enterprise linux +10 more +12 moreGhostscript: incomplete fix for cve-2020-16305CVE-2023-40425.5 Medium
- redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 moreSubscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configurationCVE-2023-3899Fix available7.8 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreKernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()CVE-2023-4459Fix available5.5 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreMemory leak in btrfs_get_dev_args_from_path()CVE-2023-4394Fix available6.7 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: btrfs: double free in btrfs_get_root_ref()CVE-2023-4389Fix available7.0 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()CVE-2023-4387Fix available7.1 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: jfs: null pointer dereference in dbfree()CVE-2023-4385Fix available5.5 Medium
- postgresql, debian linux, red hat enterprise linux 6 +7 more +9 morePostgresql: merge fails to enforce update or select row security policiesCVE-2023-39418Fix available3.1 Low
- postgresql, debian linux, red hat advanced cluster security 4.2 +19 more +21 morePostgresql: extension script @substitutions@ within quoting allow sql injectionCVE-2023-39417Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: exfat: stack overflow in exfat_get_uniname_from_ext_entryCVE-2023-4273Fix available6.0 Medium
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreSev-es / sev-snp vmgexit double fetch vulnerabilityCVE-2023-4155Fix available5.3 Medium
- gnu gawk, fedora, red hat enterprise linux 6 +4 more +6 moreHeap out of bound read in builtin.cCVE-2023-4156Fix available4.4 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuidCVE-2023-4194Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-freeCVE-2023-4147Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: memory leak via ksmbd session setup request with unknown ntlmssp message typeCVE-2023-32255Fix available5.3 Medium
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreOut-of-bounds read information disclosure vulnerabilityCVE-2023-4135Fix available6.0 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreKernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()CVE-2023-4134Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: smsusb: use-after-free caused by do_submit_urb()CVE-2023-4132Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: cxgb4: use-after-free in ch_flower_stats_cb()CVE-2023-4133Fix available5.5 Medium
- qemu, debian linux, fedora extra packages for enterprise linux +6 more +8 moreHeap buffer overflow in virtio_crypto_sym_op_helper()CVE-2023-3180Fix available6.0 Medium
- artifex ghostscript, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_nameCVE-2023-38560Fix available5.5 Medium
- artifex ghostscript, debian linux, fedoraproject fedora +5 more +7 moreGhostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dosCVE-2023-38559Fix available5.5 Medium
- qemu, fedora extra packages for enterprise linux, fedora +7 more +9 moreTriggerable assertion due to race condition in hot-unplugCVE-2023-3301Fix available5.6 Medium
- qemu, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreQemu: vnc: infinite loop in inflate_buffer() leads to denial of serviceCVE-2023-3255Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +19 more +21 moreKernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()CVE-2023-4004Fix available7.8 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: potential integer overflow in raw2tiff.cCVE-2023-41175Fix available6.5 Medium
- libtiff, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreLibtiff: integer overflow in tiffcp.cCVE-2023-40745Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattrCVE-2023-3773Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreKernel: xfrm: null pointer dereference in xfrm_update_ae_params()CVE-2023-3772Fix available5.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user sp…CVE-2023-3640Public exploitFix available7.0 High
- linux kernel, fedora, netapp h300s +8 more +10 moreTree connection null pointer dereference denial-of-service vulnerabilityCVE-2023-32248Fix available7.5 High
- linux kernel, fedora, netapp h300s +7 more +9 moreSession race condition remote code execution vulnerabilityCVE-2023-32258Fix available8.1 High
- linux kernel, fedora, netapp h300s +8 more +10 moreSession race condition remote code execution vulnerabilityCVE-2023-32257Fix available8.1 High
- linux kernel, fedora, netapp h300s firmware +8 more +10 moreSession null pointer dereference denial-of-service vulnerabilityCVE-2023-32252Fix available7.5 High
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreQemu: 9pfs: suid/sgid bits not dropped on file writeCVE-2023-13863.3 Low
- imagemagick, red hat enterprise linux 6, enterprise linux 7 +2 moreImagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.hCVE-2023-3745Fix available5.5 Medium
- Show moreLoading…