Skip to contentRedhat Enterprise Linux vulnerabilities
- libtiff, apple mac os x, mac os x server +10 more +12 moreMultiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier,...CVE-2004-0803Fix available7.5 High
- mozilla firefox, mozilla, mozilla thunderbird +6 more +8 moreInteger overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release,...CVE-2004-090410.0 High
- mozilla, mozilla thunderbird, conectiva linux +4 more +6 moreStack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox...CVE-2004-090310.0 High
- mozilla, mozilla thunderbird, conectiva linux +4 more +6 moreMultiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla...CVE-2004-0902EPSS 10.1%10.0 High
- redhat enterprise linux, enterprise linux desktop +1 moreUnknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple...CVE-2004-0750Fix available7.5 High
- enlightenment imlib, imlib2, conectiva linux +11 more +13 moreBuffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute...CVE-2004-0802Fix available5.1 Medium
- enlightenment imlib, conectiva linux, enlightenment imlib2 +11 more +13 moreMultiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to...CVE-2004-0817Fix available7.5 High
- apache http server, debian linux, hp hp-ux +8 more +10 moreThe mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of...CVE-2004-0809Fix availableEPSS 17.2%5.0 Medium
- imagemagick, conectiva linux, enlightenment imlib +9 more +11 moreMultiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6...CVE-2004-0827Fix available7.5 High
- mozilla firefox, mozilla, conectiva linux +5 more +7 moreMozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8...CVE-2004-09054.6 Medium
- mit kerberos 5, debian linux, redhat enterprise linux desktop +2 more +4 moreDouble free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and...CVE-2004-0643Fix available4.6 Medium
- mit kerberos 5, debian linux, redhat enterprise linux desktop +2 more +4 moreDouble free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key...CVE-2004-0642Fix available7.5 High
- avaya cvlan, redhat enterprise linux, enterprise linux desktop +1 more +3 moreMultiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote...CVE-2004-0494Fix available7.5 High
- sox, conectiva linux, redhat enterprise linux +2 more +4 moreMultiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17...CVE-2004-0557Public exploitFix availableEPSS 25.1%10.0 High
- ethereal group ethereal, gentoo linux, mandrakesoft mandrake linux +2 more +4 moreThe SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of...CVE-2004-0635Fix available5.0 Medium
- ethereal group ethereal, gentoo linux, mandrakesoft mandrake linux +2 more +4 moreThe SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a...CVE-2004-06345.0 Medium
- ethereal group ethereal, gentoo linux, mandrakesoft mandrake linux +2 more +4 moreThe iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial...CVE-2004-0633Public exploitEPSS 18.0%5.0 Medium
- conectiva linux, linux kernel, mandrakesoft mandrake linux +4 more +6 moreUnknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files,...CVE-2004-0497Public exploitFix available2.1 Low
- kame racoon, ipsec-tools, redhat enterprise linux +1 more +3 moreThe eay_check_x509cert function in KAME Racoon successfully verifies certificates even when...CVE-2004-0607Fix available10.0 High
- conectiva linux, linux kernel, avaya converged communications server +13 more +15 moreMultiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges...CVE-2004-04957.2 High
- conectiva linux, linux kernel, avaya converged communications server +13 more +15 moreLinux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system...CVE-2004-0554Public exploit2.1 Low
- apache http server, debian linux, redhat enterprise linux server +1 more +3 moreStack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache...CVE-2004-0488Fix availableEPSS 37.7%7.5 High
- libpng, openpkg, redhat enterprise linux +2 more +4 moreThe Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a...CVE-2004-0421Fix available5.0 Medium
- openssl, 4d webstar, apple mac os x +61 more +63 moreThe SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos...CVE-2004-0112Fix availableEPSS 10.4%5.0 Medium
- openssl, 4d webstar, apple mac os x +62 more +64 moreOpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote...CVE-2004-0081Fix available5.0 Medium
- openssl, 4d webstar, apple mac os x +62 more +64 moreThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows...CVE-2004-0079Fix available7.5 High
- gnome gdkpixbuf, redhat enterprise linux, gdk pixbuf +2 more +4 moregdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed...CVE-2004-0111Fix available5.0 Medium
- metamail corporation metamail, redhat enterprise linux, linux advanced workstation +1 more +3 moreMultiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary...CVE-2004-01057.5 High
- metamail corporation metamail, redhat enterprise linux, linux advanced workstation +1 more +3 moreMultiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to...CVE-2004-0104Public exploitEPSS 26.2%7.5 High
- redhat enterprise linux, suse linux +1 moreUnspecified vulnerability in xscreensaver 4.12, and possibly other versions, allows attackers to...CVE-2003-1295Fix available2.1 Low
- linux kernel, redhat enterprise linux +1 moreVarious routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2...CVE-2003-09861.7 Low
- redhat enterprise linuxThe (1) ipq_read and (2) ipulog_read functions in iptables allow local users to cause a denial of...CVE-2003-08574.6 Medium
- gnu glibc, zebra, intel ia64 +4 more +6 moreThe getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a...CVE-2003-08594.9 Medium
- redhat enterprise linuxThe getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a...CVE-2003-0689Fix available7.5 High
- redhat enterprise linux, linux advanced workstation +1 moreThe C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access...CVE-2003-06997.5 High
- gnome gdm, redhat enterprise linux, kdebase +1 more +3 moreThe X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to...CVE-2003-05495.0 Medium
- gnome gdm, redhat enterprise linux, kdebase +1 more +3 moreThe X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to...CVE-2003-05485.0 Medium
- adobe acrobat, xpdf, mandrakesoft mandrake linux +4 more +6 moreVarious PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to...CVE-2003-0434Public exploitFix availableEPSS 40.9%7.5 High
- debian linux, mandrakesoft mandrake linux, microsoft windows 98 +6 more +8 moreThe Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via...CVE-2002-21854.9 Medium
- safe.pm, redhat enterprise linux, linux advanced workstation +6 more +8 moreSafe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out...CVE-2002-1323Fix available4.6 Medium
- debian linux, freebsd, mandrakesoft mandrake linux +2 more +4 morecpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask...CVE-1999-1572Fix available2.1 Low