Skip to contentRed Hat Enterprise Linux 9 vulnerabilities
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreKernel: refcount leak in ctnetlink_create_conntrack()CVE-2023-7192Fix available5.5 Medium
- latchset jwcrypto, fedoraproject fedora, red hat ansible automation platform 2 +7 more +9 moreJwcrypto: denail of service via specifically crafted jweCVE-2023-6681Fix available5.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uafCVE-2023-6531Fix available7.0 High
- sudo project sudo, fedora, red hat enterprise linux 6 +3 more +5 moreSudo: improper handling of ipa_hostname leads to privilege mismanagementCVE-2023-7090Fix available6.6 Medium
- systemd project systemd, red hat cryostat 2, enterprise linux 8 +2 more +4 moreSystemd-resolved: unsigned name response in signed zone is not refused when dnssec=yesCVE-2023-7008Fix available5.9 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()CVE-2023-7042Fix available4.4 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +14 more +16 moreKernel: gsm multiplexing race condition leads to privilege escalationCVE-2023-6546Public exploitFix available7.0 High
- libssh, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 moreLibssh: proxycommand/proxyjump features allow injection of malicious code through hostnameCVE-2023-6004Fix available4.8 Medium
- libssh, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibssh: missing checks for return values for digestsCVE-2023-6918Fix available3.7 Low
- couchbase server, cryptography.io cryptography, red hat ansible automation platform 2 +8 more +10 morePython-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659CVE-2023-50782Fix available7.5 High
- debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 moreXorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderpropertyCVE-2023-6478Fix available7.6 High
- debian linux, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +17 more +19 moreXorg-x11-server: out-of-bounds memory reads/writes in xkb button actionsCVE-2023-6377Fix available7.8 High
- modcluster mod proxy cluster, red hat jboss core services for rhel 8, jboss core services on rhel 7 +3 more +5 moreMod_cluster/mod_proxy_cluster: stored cross site scriptingCVE-2023-6710Public exploit5.4 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.cCVE-2023-6679Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: null pointer dereference vulnerability in nft_dynset_init()CVE-2023-6622Fix available5.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +8 more +10 moreKernel: oob access in smb2_dump_detailCVE-2023-6610Fix available7.1 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreKernel: out-of-bounds read vulnerability in smbcalcsizeCVE-2023-6606Fix available7.1 High
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: io_uring out of boundary memory access in __io_uaddr_map()CVE-2023-6560Fix available5.5 Medium
- perl, red hat enterprise linux 6, enterprise linux 7 +2 more +4 morePerl: perl for windows binary hijacking vulnerabilityCVE-2023-470397.8 High
- perl, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 morePerl: write past buffer end via illegal user-defined unicode propertyCVE-2023-47038Fix available7.0 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreLibtiff: out-of-memory in tiffopen via a craft fileCVE-2023-6277Fix available6.5 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.cCVE-2023-5972Fix available7.0 High
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: nvme: memory corruption via unprivileged user passthroughCVE-2023-6238Fix available6.7 Medium
- libtiff, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreLibtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.cCVE-2023-6228Fix available3.3 Low
- gnu gnutls, debian linux, fedoraproject fedora +12 more +14 moreGnutls: timing side-channel in the rsa-psk authenticationCVE-2023-5981Fix available5.9 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: local dos vulnerability in scatterwalk_copychunksCVE-2023-6176Fix available4.7 Medium
- redhat libnbd, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreLibnbd: malicious nbd server may crash libnbdCVE-2023-5871Fix available5.3 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +9 more +11 moreKernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_getCVE-2023-6121Fix available4.3 Medium
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 morePostgresql: role pg_signal_backend can signal certain superuser processes.CVE-2023-5870Fix available2.2 Low
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 morePostgresql: buffer overrun from integer overflow in array modificationCVE-2023-5869Fix available8.8 High
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 morePostgresql: memory disclosure in aggregate function callsCVE-2023-5868Fix available4.3 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bounds read printing error messagesCVE-2023-40546Fix available6.2 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnectCVE-2023-6039Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()CVE-2023-39198Fix available7.5 High
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +3 more +5 moreKernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()CVE-2023-39197Fix available4.0 Medium
- opensc project opensc, fedoraproject fedora, red hat enterprise linux 7 +3 more +5 moreOpensc: out-of-bounds read in myeid driver handling encryption using symmetric keysCVE-2023-4535Fix available4.5 Medium
- qemu, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu: improper ide controller reset can lead to mbr overwriteCVE-2023-5088Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd memory exhaustion denial-of-service vulnerabilityCVE-2023-2593Fix available5.9 Medium
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreSquid: dos against http and httpsCVE-2023-5824Fix available7.5 High
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreUse-after-free in parse_lease_state()CVE-2023-1194Fix available7.1 High
- libtiff, fedora, red hat enterprise linux 6 +4 more +6 moreHeap-buffer-overflow in extractimagesection()CVE-2023-3164Fix available5.5 Medium
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreSquid: denial of service in ftpCVE-2023-46848Fix availableEPSS 11.4%8.6 High
- squid-cache squid, red hat enterprise linux 6 extended lifecycle support, enterprise linux 7 +22 more +24 moreSquid: denial of service in http digest authenticationCVE-2023-46847Fix availableEPSS 78.5%8.6 High
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +18 more +20 moreSquid: request/response smuggling in http/1.1 and icapCVE-2023-46846Fix available9.3 Critical
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreUse-after-free in setup_async_work()CVE-2023-1193Fix available6.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: slab-use-after-free write in txend due to race conditionCVE-2023-3397Fix available7.0 High
- redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 moreInsights-client: unsafe handling of temporary files and directoriesCVE-2023-3972Fix available7.8 High
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +3 more +5 moreXorg-x11-server: use-after-free bug in damagedestroyCVE-2023-5574Fix available7.0 High
- x.org x server, debian linux, fedoraproject fedora +6 more +8 moreXorg-x11-server: use-after-free bug in destroywindowCVE-2023-5380Fix available4.7 Medium
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +25 more +27 moreXorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputpropertyCVE-2023-5367Fix available7.8 High
- Show moreLoading…