Skip to contentRed Hat Enterprise Linux 9.0 Extended Update Support vulnerabilities
- buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 moreBuildah: buildah allows arbitrary directory mountCVE-2024-9675Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +16 more +18 moreFreeipa: user can obtain a hash of the passwords of all domain users and perform offline brute forceCVE-2024-3183Public exploitFix available8.1 High
- fedoraproject sssd, fedora, red hat enterprise linux 6 +29 more +31 moreSssd: race condition during authorization leads to gpo policies functioning inconsistentlyCVE-2023-3758Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +10 more +12 morePcp: exposure of the redis server backend allows remote command execution via pmproxyCVE-2024-3019Fix available8.8 High
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 8.6 extended update support +9 more +11 moreBuildah: buildah: container escape via improper bind mount validationCVE-2024-1753Fix available8.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: use-after-free in procrenderaddglyphsCVE-2024-31083Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdeviceCVE-2024-31081Fix available7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +13 more +15 moreXorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsCVE-2024-31080Fix available7.3 High
- fedoraproject unbound, red hat enterprise linux 10, enterprise linux 6 +31 more +33 moreUnbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalationCVE-2024-1488Fix available8.0 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +5 more +7 moreKernel: marvin vulnerability side-channel leakage in the rsa decryption operationCVE-2023-6240Fix available6.5 Medium
- linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 morerunc container breakout through process.cwd trickery and leaked fdsCVE-2024-21626Public exploitFix availableEPSS 18.9%8.6 High
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out of bounds read when parsing mz binariesCVE-2023-40551Fix available5.1 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bound read in verify_buffer_sbat()CVE-2023-40550Fix available5.5 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bounds read in verify_buffer_authenticode() malformed pe fileCVE-2023-40549Fix available6.2 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +12 more +14 moreShim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systemsCVE-2023-40548Fix available7.4 High
- redhat shim, red hat enterprise linux 7, enterprise linux 8 +12 more +14 moreShim: rce in http boot support may lead to secure boot bypassCVE-2023-40547Fix available8.3 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreKernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destinationCVE-2024-0646Fix available7.0 High
- red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension, enterprise linux 7 +14 more +16 moreXorg-x11-server: heap buffer overflow in disabledeviceCVE-2024-21886Fix available7.8 High
- red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension, enterprise linux 7 +12 more +14 moreXorg-x11-server: heap buffer overflow in xisenddevicehierarchyeventCVE-2024-21885Fix available7.8 High
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +20 more +22 moreXorg-x11-server: reattaching to different master device may lead to out-of-bounds memory accessCVE-2024-0229Fix available7.8 High
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +19 more +21 moreXorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointerCVE-2023-6816Fix available9.8 Critical
- gnu grub2, fedoraproject fedora, red hat enterprise linux 8 +4 more +6 moreGrub2: bypass the grub password protection featureCVE-2023-4001Fix available6.8 Medium
- freeipa, fedoraproject fedora, red hat enterprise linux 6 +32 more +34 moreIpa: invalid csrf protectionCVE-2023-5455Fix available6.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreKernel: refcount leak in ctnetlink_create_conntrack()CVE-2023-7192Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +14 more +16 moreKernel: gsm multiplexing race condition leads to privilege escalationCVE-2023-6546Public exploitFix available7.0 High
- debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 moreXorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderpropertyCVE-2023-6478Fix available7.6 High
- debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 moreXorg-x11-server: out-of-bounds memory reads/writes in xkb button actionsCVE-2023-6377Fix available7.8 High
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 morePostgresql: role pg_signal_backend can signal certain superuser processes.CVE-2023-5870Fix available2.2 Low
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 morePostgresql: buffer overrun from integer overflow in array modificationCVE-2023-5869Fix available8.8 High
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 morePostgresql: memory disclosure in aggregate function callsCVE-2023-5868Fix available4.3 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bounds read printing error messagesCVE-2023-40546Fix available6.2 Medium
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreSquid: dos against http and httpsCVE-2023-5824Fix available7.5 High
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreSquid: denial of service in ftpCVE-2023-46848Fix availableEPSS 11.4%8.6 High
- squid-cache squid, red hat enterprise linux 6 extended lifecycle support, enterprise linux 7 +22 more +24 moreSquid: denial of service in http digest authenticationCVE-2023-46847Fix availableEPSS 78.5%8.6 High
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +18 more +20 moreSquid: request/response smuggling in http/1.1 and icapCVE-2023-46846Fix available9.3 Critical
- redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 moreInsights-client: unsafe handling of temporary files and directoriesCVE-2023-3972Fix available7.8 High
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +25 more +27 moreXorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputpropertyCVE-2023-5367Fix available7.8 High
- linux kernel, netapp active iq unified manager, solidfire \& hci management node +21 more +23 moreKernel: use after free in nvmet_tcp_free_crypto in nvmeCVE-2023-5178Public exploitFix available8.8 High
- gnome tracker miners, red hat enterprise linux 7, enterprise linux 8 +12 more +14 moreTracker-miners: sandbox escapeCVE-2023-5557Fix available7.5 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smbd allows client access to unix domain sockets on the file system as rootCVE-2023-3961Fix available9.1 Critical
- samba, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreSamba: "rpcecho" development server allows denial of service via sleep() call on ad dcCVE-2023-42669Fix available6.5 Medium
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smb clients can truncate files with read-only permissionsCVE-2023-4091Fix available6.5 Medium
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- debian linux, linux kernel, red hat enterprise linux 6 +17 more +19 moreKernel: netfilter: potential slab-out-of-bound access due to integer underflowCVE-2023-42753Fix available7.0 High
- mariadb, fedoraproject fedora, red hat enterprise linux 7 +18 more +20 moreMariadb: node crashes with transport endpoint is not connected mysqld got signal 6CVE-2023-5157Fix available7.5 High
- redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 moreSubscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configurationCVE-2023-3899Fix available7.8 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreKernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()CVE-2023-4459Fix available5.5 Medium
- postgresql, debian linux, red hat advanced cluster security 4.2 +19 more +21 morePostgresql: extension script @substitutions@ within quoting allow sql injectionCVE-2023-39417Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-freeCVE-2023-4147Public exploitFix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +19 more +21 moreKernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()CVE-2023-4004Fix available7.8 High
- Show moreLoading…