Skip to contentRedhat Enterprise Linux vulnerabilities
- redhat enterprise linuxusr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's...CVE-2007-3099Fix available2.1 Low
- php, canonical ubuntu linux, debian linux +2 more +4 moreBuffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has...CVE-2007-18647.5 High
- linux kernel, redhat enterprise linux +1 moreThe utrace support in Linux kernel 2.6.18, and other versions, allows local users to cause a...CVE-2007-07714.9 Medium
- redhat enterprise linux, fedora core +1 morelharc.c in lha does not securely create temporary files, which might allow local users to read or...CVE-2007-20304.9 Medium
- x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +6 more +8 moreInteger overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows...CVE-2007-1352Fix available3.8 Low
- x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +5 more +7 moreInteger overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before...CVE-2007-1351Fix available8.5 High
- apache mod perl, canonical ubuntu linux, redhat enterprise linux desktop +4 more +6 morePerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not...CVE-2007-1349Fix availableEPSS 10.4%5.0 Medium
- redhat enterprise linuxpam_console does not properly restore ownership for certain console devices when there are...CVE-2007-17163.4 Low
- php, canonical ubuntu linux, novell suse linux +4 more +6 moreThe Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a...CVE-2007-1285Public exploitEPSS 18.8%7.5 High
- redhat enterprise linuxThe file watch implementation in the audit subsystem (auditctl -w) in the Red Hat Enterprise...CVE-2007-0001Public exploit4.7 Medium
- ekiga, redhat enterprise linux, enterprise linux desktop +2 moreFormat string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a...CVE-2007-1007Fix available10.0 High
- linux kernel, redhat enterprise linux, enterprise linux desktop +2 moreUnspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is...CVE-2006-57537.2 High
- gd graphics library project graphics library, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreBuffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and...CVE-2007-0455Fix availableEPSS 12.3%7.5 High
- gnu privacy guard, gpg4win, redhat enterprise linux +4 more +6 moreA "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0...CVE-2006-6235Fix available10.0 High
- redhat enterprise linuxThe kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to...CVE-2006-43425.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux +2 moreThe clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote...CVE-2006-49977.5 High
- debian linux, fedoraproject fedora core, redhat enterprise linux +5 more +7 morepam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other...CVE-2006-5170Fix available7.5 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote...CVE-2006-51587.5 High
- redhat enterprise linuxA regression error in the Perl package for Red Hat Enterprise Linux 4 omits the patch for CVE...CVE-2006-3813Fix available2.1 Low
- apache http server, canonical ubuntu linux, debian linux +2 more +4 morehttp_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache...CVE-2006-3918Public exploitFix availableEPSS 95.1%4.3 Medium
- kde, redhat enterprise linux, enterprise linux desktop +2 morekdesktop_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not...CVE-2006-2933Fix available4.6 Medium
- redhat enterprise linuxinitscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables...CVE-2005-3629Fix available7.2 High
- gnu tar, redhat enterprise linux, enterprise linux desktop +1 more +3 moreThe original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat...CVE-2005-1918Fix available2.6 Low
- redhat enterprise linux, enterprise linux desktop +1 moreudev does not properly set permissions on certain files in /dev/input, which allows local users...CVE-2005-3631Fix available4.6 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora core +3 more +5 moreMemory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote...CVE-2005-2970Fix availableEPSS 14.2%5.0 Medium
- redhat enterprise linux, enterprise linux desktop +1 moreThe rw_vm function in usercopy.c in the 4GB split patch for the Linux kernel in Red Hat...CVE-2005-21002.1 Low
- linux kernel, canonical ubuntu linux, redhat enterprise linux +2 moreThe raw_sendmsg function in the Linux kernel 2.6 before 2.6.13.1 allows local users to cause a...CVE-2005-24923.6 Low
- redhat enterprise linux, enterprise linux desktop +1 moreinit_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not...CVE-2005-04037.2 High
- apache http server, debian linux, redhat enterprise linux desktop +2 more +4 moreOff-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache...CVE-2005-1268Fix available5.0 Medium
- redhat sysreport, enterprise linux, enterprise linux desktop +1 more +3 moresysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the...CVE-2005-1760Fix available7.5 High
- redhat enterprise linux, enterprise linux desktop +1 moreThe xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does...CVE-2005-0757Fix available2.1 Low
- redhat enterprise linux, enterprise linux desktop, linux advanced workstation +2 moreStack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows...CVE-2005-1194Fix available4.6 Medium
- logwatch, redhat enterprise linux, linux advanced workstation +2 moreThe secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting...CVE-2005-1061Public exploitFix available5.0 Medium
- paul vixie vixie cron, redhat enterprise linux +1 morecrontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron...CVE-2005-1038Fix available2.1 Low
- gnu gzip, freebsd, gentoo linux +9 more +11 moreRace condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local...CVE-2005-0988Fix available3.7 Low
- conectiva linux, linux kernel, redhat enterprise linux +2 more +4 moreThe bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1...CVE-2005-0750Public exploit7.2 High
- suse linux, redhat enterprise linux, trustix secure linux +2 moreUnknown vulnerability in the PPP driver for the Linux kernel 2.6.8.1 allows remote attackers to...CVE-2005-03845.0 Medium
- ipsec-tools, kame racoon, altlinux alt linux +4 more +6 moreThe KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of...CVE-2005-0398Fix available5.0 Medium
- conectiva linux, linux kernel, redhat enterprise linux +2 more +4 moreInteger overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local...CVE-2005-0736Public exploit2.1 Low
- conectiva linux, linux kernel, redhat enterprise linux +1 more +3 moreUnknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a...CVE-2005-02072.1 Low
- ethereal group ethereal, altlinux alt linux, conectiva linux +3 more +5 moreMultiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector ...CVE-2005-06997.5 High
- sylpheed, altlinux alt linux, gentoo linux +4 more +6 moreBuffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers...CVE-2005-0667Fix available5.1 Medium
- freebsd, redhat enterprise linux, enterprise linux desktop +5 more +7 moreHyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel...CVE-2005-01095.6 Medium
- altlinux alt linux, lesstif, mandrakesoft mandrake linux +7 more +9 morescan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value...CVE-2005-0605Fix available7.5 High
- redhat enterprise linux, enterprise linux desktop +1 moreUnknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using...CVE-2005-00917.2 High
- redhat enterprise linux, enterprise linux desktop +1 moreA regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access...CVE-2005-00902.1 Low
- rob flynn gaim, mandrakesoft mandrake linux, mandrake linux corporate server +2 more +4 moreThe HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of...CVE-2005-04735.0 Medium
- rob flynn gaim, mandrakesoft mandrake linux, mandrake linux corporate server +2 more +4 moreGaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via...CVE-2005-0472Fix available5.0 Medium
- redhat enterprise linux, enterprise linux desktop +1 moreUnknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running...CVE-2005-00922.1 Low
- debian linux, xpdf, ascii ptex +15 more +17 moreThe patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete...CVE-2005-0206Fix available7.5 High
- Show moreLoading…