Skip to contentRed Hat Enterprise Linux 9 vulnerabilities
- shadow-maint shadow-utils, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreShadow-utils: possible password leak during passwd(1) changeCVE-2023-4641Fix available4.7 Medium
- gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 moreGlibc: potential use-after-free in gaih_inet()CVE-2023-4813Public exploitFix available5.9 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreUse after free race between mbind() and vma-locked page faultCVE-2023-4611Fix available7.0 High
- debian linux, linux kernel, fedora +5 more +7 moreKernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.cCVE-2023-4569Fix available5.5 Medium
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: challenge-response protocol bypass during agent registrationCVE-2023-38201Fix available6.5 Medium
- artifex ghostscript, red hat enterprise linux 8, redhat enterprise linux +10 more +12 moreGhostscript: incomplete fix for cve-2020-16305CVE-2023-40425.5 Medium
- redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 moreSubscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configurationCVE-2023-3899Fix available7.8 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreKernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()CVE-2023-4459Fix available5.5 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreMemory leak in btrfs_get_dev_args_from_path()CVE-2023-4394Fix available6.7 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: btrfs: double free in btrfs_get_root_ref()CVE-2023-4389Fix available7.0 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()CVE-2023-4387Fix available7.1 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: jfs: null pointer dereference in dbfree()CVE-2023-4385Fix available5.5 Medium
- postgresql, debian linux, red hat enterprise linux 6 +7 more +9 morePostgresql: merge fails to enforce update or select row security policiesCVE-2023-39418Fix available3.1 Low
- postgresql, debian linux, red hat advanced cluster security 4.2 +19 more +21 morePostgresql: extension script @substitutions@ within quoting allow sql injectionCVE-2023-39417Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: exfat: stack overflow in exfat_get_uniname_from_ext_entryCVE-2023-4273Fix available6.0 Medium
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreSev-es / sev-snp vmgexit double fetch vulnerabilityCVE-2023-4155Fix available5.3 Medium
- gnu gawk, fedora, red hat enterprise linux 6 +4 more +6 moreHeap out of bound read in builtin.cCVE-2023-4156Fix available4.4 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuidCVE-2023-4194Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-freeCVE-2023-4147Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: memory leak via ksmbd session setup request with unknown ntlmssp message typeCVE-2023-32255Fix available5.3 Medium
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreOut-of-bounds read information disclosure vulnerabilityCVE-2023-4135Fix available6.0 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreKernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()CVE-2023-4134Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: smsusb: use-after-free caused by do_submit_urb()CVE-2023-4132Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: cxgb4: use-after-free in ch_flower_stats_cb()CVE-2023-4133Fix available5.5 Medium
- qemu, debian linux, fedora extra packages for enterprise linux +6 more +8 moreHeap buffer overflow in virtio_crypto_sym_op_helper()CVE-2023-3180Fix available6.0 Medium
- artifex ghostscript, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGhostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_nameCVE-2023-38560Fix available5.5 Medium
- artifex ghostscript, debian linux, fedoraproject fedora +5 more +7 moreGhostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dosCVE-2023-38559Fix available5.5 Medium
- qemu, fedora extra packages for enterprise linux, fedora +7 more +9 moreTriggerable assertion due to race condition in hot-unplugCVE-2023-3301Fix available5.6 Medium
- qemu, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreQemu: vnc: infinite loop in inflate_buffer() leads to denial of serviceCVE-2023-3255Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +19 more +21 moreKernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()CVE-2023-4004Fix available7.8 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: potential integer overflow in raw2tiff.cCVE-2023-41175Fix available6.5 Medium
- libtiff, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreLibtiff: integer overflow in tiffcp.cCVE-2023-40745Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattrCVE-2023-3773Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreKernel: xfrm: null pointer dereference in xfrm_update_ae_params()CVE-2023-3772Fix available5.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user sp…CVE-2023-3640Public exploitFix available7.0 High
- linux kernel, fedora, netapp h300s +8 more +10 moreTree connection null pointer dereference denial-of-service vulnerabilityCVE-2023-32248Fix available7.5 High
- linux kernel, fedora, netapp h300s +7 more +9 moreSession race condition remote code execution vulnerabilityCVE-2023-32258Fix available8.1 High
- linux kernel, fedora, netapp h300s +8 more +10 moreSession race condition remote code execution vulnerabilityCVE-2023-32257Fix available8.1 High
- linux kernel, fedora, netapp h300s firmware +8 more +10 moreSession null pointer dereference denial-of-service vulnerabilityCVE-2023-32252Fix available7.5 High
- qemu, fedora extra packages for enterprise linux, fedora +5 more +7 moreQemu: 9pfs: suid/sgid bits not dropped on file writeCVE-2023-13863.3 Low
- linux kernel, fedora, netapp h300s +7 more +9 moreSession setup memory exhaustion denial-of-service vulnerabilityCVE-2023-32247Fix available7.5 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreKernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_fragsCVE-2023-3812Fix available7.8 High
- frrouting, fedora, red hat enterprise linux 8 +1 more +3 moreInifinite loop in babld message parsing may cause dosCVE-2023-3748Fix available3.5 Low
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: registrar is subject to a dos against ssl connectionsCVE-2023-38200Fix available7.5 High
- linux kernel, canonical ubuntu linux, red hat enterprise linux 6 +9 more +11 moreKernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to raceCVE-2023-3567Fix available7.1 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +17 more +19 moreQemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()CVE-2023-3019Fix available6.0 Medium
- debian linux, linux kernel, fedora +4 more +6 moreUse-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.cCVE-2023-3863Fix available6.4 Medium
- fedora extra packages for enterprise linux 7, fedora, libssh +3 more +5 moreProcessing sftp server read may cause null dereferenceCVE-2023-36033.1 Low
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: memory leak in tiffcrop.cCVE-2023-3576Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSamba: check attribute access rights for ldap adds of computersCVE-2020-25720Fix available7.5 High
- Show moreLoading…