Skip to contentRedhat Enterprise Linux vulnerabilities
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +4 more +6 moreIn Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...CVE-2019-102457.5 High
- red hat 389-ds-base, debian linux, fedoraproject 389 directory server +1 more +3 moreIn 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will...CVE-2019-3883Fix available5.3 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification...CVE-2018-16878Fix available6.2 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in the way pacemaker's client-server authentication was implemented in versions...CVE-2018-16877Fix available8.8 High
- freeradius, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreFreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is...CVE-2019-11235Fix available9.8 Critical
- freeradius, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreFreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a ...CVE-2019-11234Fix available9.8 Critical
- broadcom brcmfmac wifi driver, brcmfmac driver, redhat enterprise linux +2 moreBroadcom brcmfmac driver is vulnerable to a frame validation bypassCVE-2019-9503Fix available7.9 High
- linux kernel, redhat enterprise linux +1 moreIt was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is...CVE-2019-3837Fix available6.1 Medium
- apple icloud, icloud for windows, ios +9 more +11 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...CVE-2019-8544Fix available8.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...CVE-2019-8536Fix available8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...CVE-2019-8535Fix available8.8 High
- apple icloud, icloud for windows, ios +10 more +12 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12...CVE-2019-8506In KEVPublic exploitFix availableEPSS 16.2%8.8 High
- isc bind, redhat enterprise linux server aus, enterprise linux server eus +1 more +3 moreA denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker...CVE-2017-3139Fix available7.5 High
- microsoft nuget, .net core sdk, visual studio +6 more +8 moreA tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow...CVE-2019-0757Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreA flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access...CVE-2019-3887Fix available6.7 Medium
- samba, debian linux, fedoraproject fedora +3 more +5 moreA flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry...CVE-2019-3880Fix available4.2 Medium
- systemd, debian linux, fedoraproject fedora +1 more +3 moreIn systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the...CVE-2019-3842Public exploitFix available4.5 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), fedoraproject fedora +6 more +8 moreBuffer overflow in system firmware for EDK II may allow unauthenticated user to potentially...CVE-2019-0160Fix available8.7 High
- rubygems, debian linux, opensuse leap +1 more +3 moreCode injection in RubyGemsCVE-2019-8324Fix available8.8 High
- [unknown] sssd, redhat enterprise linux +1 moreA flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by...CVE-2018-16838Fix available5.4 Medium
- linux kernel, canonical ubuntu linux, debian linux +6 more +8 moreThe SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem....CVE-2019-3874Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...CVE-2019-9810Public exploitFix availableEPSS 27.2%8.8 High
- python, canonical ubuntu linux, debian linux +11 more +13 moreurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...CVE-2019-9948Fix availableEPSS 11.8%9.1 Critical
- canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +2 more +4 moreA vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL...CVE-2019-3877Fix available5.8 Medium
- artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 moreIt was found that the forceput operator could be extracted from the DefineResource method in...CVE-2019-3838Fix available7.3 High
- artifex ghostscript, debian linux, fedoraproject fedora +8 more +10 moreIt was found that the superexec operator was available in the internal dictionary in ghostscript...CVE-2019-3835Fix available7.3 High
- freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack...CVE-2019-9903Fix available6.5 Medium
- tuxera ntfs-3g, redhat enterprise linux, enterprise linux eus +3 more +5 moreAn integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially...CVE-2019-9755Fix available7.0 High
- canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +8 more +10 moreA vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse...CVE-2019-3878Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreThe IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to...CVE-2019-9792Public exploitFix availableEPSS 13.3%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreThe type inference system allows the compilation of functions that can cause type confusions...CVE-2019-9791Public exploitFix availableEPSS 19.9%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMozilla developers and community members reported memory safety bugs present in Firefox 65,...CVE-2019-9788Fix available9.8 Critical
- libssh2, debian linux, netapp ontap select deploy administration utility +10 more +12 moreA flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...CVE-2019-3863Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3857Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...CVE-2019-3856Fix available7.5 High
- libssh2, apple xcode, debian linux +14 more +16 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3855Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5798Fix available6.5 Medium
- [unknown] openwsman, fedoraproject fedora, opensuse leap +8 more +10 moreOpenwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure...CVE-2019-3816Fix availableEPSS 14.7%7.5 High
- golang go, debian linux, fedoraproject fedora +2 more +4 moreAn issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker...CVE-2019-9741Fix available6.1 Medium
- python, canonical ubuntu linux, debian linux +16 more +18 morePython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...CVE-2019-9636Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreIn the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap...CVE-2019-9213Public exploitFix available5.5 Medium
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreIn the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows...CVE-2018-20784Fix available9.8 Critical
- isc bind, bind 9, redhat enterprise linux +2 moreZone transfer controls for writable DLZ zones were not effectiveCVE-2019-6465Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreThe KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.CVE-2019-7222Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 moreThe KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.CVE-2019-7221Fix available7.8 High
- sqlalchemy, debian linux, opensuse backports sle +6 more +8 moreSQLAlchemy vulnerable to SQL Injection via order_by parameterCVE-2019-7164Fix available9.8 Critical
- google chrome, fedoraproject fedora, redhat enterprise linux desktop +2 more +4 moreAn incorrect JIT of GLSL shaders in SwiftShader in Google Chrome prior to 72.0.3626.81 allowed a...CVE-2019-57718.8 High
- Show moreLoading…