Skip to contentRedhat Enterprise Linux vulnerabilities
- redhat libnbd, red hat enterprise linux 8, enterprise linux 8 advanced virtualization +2 more +4 moreLibnbd: crash or misbehaviour when nbd server returns an unexpected block sizeCVE-2023-5215Fix available5.3 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +17 more +19 moreKernel: netfilter: potential slab-out-of-bound access due to integer underflowCVE-2023-42753Fix available7.0 High
- gnu glibc, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGlibc: dos due to memory leak in getaddrinfo.cCVE-2023-5156Fix available7.5 High
- mariadb, fedoraproject fedora, red hat enterprise linux 7 +18 more +20 moreMariadb: node crashes with transport endpoint is not connected mysqld got signal 6CVE-2023-5157Fix available7.5 High
- gnu glibc, fedoraproject fedora, red hat enterprise linux 6 +28 more +30 moreGlibc: potential use-after-free in getaddrinfo()CVE-2023-4806Fix available5.9 Medium
- gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 moreGlibc: stack read overflow in getaddrinfo in no-aaaa modeCVE-2023-4527Fix available6.5 Medium
- qemu, red hat enterprise linux 9, redhat enterprise linux +7 more +9 moreDma reentrancy issue (incomplete fix for cve-2021-3750)CVE-2023-2680Fix available7.5 High
- shadow-maint shadow-utils, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreShadow-utils: possible password leak during passwd(1) changeCVE-2023-4641Fix available4.7 Medium
- gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 moreGlibc: potential use-after-free in gaih_inet()CVE-2023-4813Public exploitFix available5.9 Medium
- debian linux, linux kernel, fedora +5 more +7 moreKernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.cCVE-2023-4569Fix available5.5 Medium
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: challenge-response protocol bypass during agent registrationCVE-2023-38201Fix available6.5 Medium
- artifex ghostscript, red hat enterprise linux 8, redhat enterprise linux +10 more +12 moreGhostscript: incomplete fix for cve-2020-16305CVE-2023-40425.5 Medium
- redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 moreSubscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configurationCVE-2023-3899Fix available7.8 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreKernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()CVE-2023-4459Fix available5.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()CVE-2023-4387Fix available7.1 High
- postgresql, debian linux, red hat enterprise linux 6 +7 more +9 morePostgresql: merge fails to enforce update or select row security policiesCVE-2023-39418Fix available3.1 Low
- postgresql, debian linux, red hat advanced cluster security 4.2 +19 more +21 morePostgresql: extension script @substitutions@ within quoting allow sql injectionCVE-2023-39417Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: exfat: stack overflow in exfat_get_uniname_from_ext_entryCVE-2023-4273Fix available6.0 Medium
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreSev-es / sev-snp vmgexit double fetch vulnerabilityCVE-2023-4155Fix available5.3 Medium
- gnu gawk, fedora, red hat enterprise linux 6 +4 more +6 moreHeap out of bound read in builtin.cCVE-2023-4156Fix available4.4 Medium
- debian linux, intel celeron 5205u firmware, celeron 5305u firmware +531 more +533 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-40982Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuidCVE-2023-4194Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-freeCVE-2023-4147Public exploitFix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: smsusb: use-after-free caused by do_submit_urb()CVE-2023-4132Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: cxgb4: use-after-free in ch_flower_stats_cb()CVE-2023-4133Fix available5.5 Medium
- artifex ghostscript, debian linux, fedoraproject fedora +5 more +7 moreGhostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dosCVE-2023-38559Fix available5.5 Medium
- qemu, fedora extra packages for enterprise linux, fedora +7 more +9 moreTriggerable assertion due to race condition in hot-unplugCVE-2023-3301Fix available5.6 Medium
- qemu, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreQemu: vnc: infinite loop in inflate_buffer() leads to denial of serviceCVE-2023-3255Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +19 more +21 moreKernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()CVE-2023-4004Fix available7.8 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: potential integer overflow in raw2tiff.cCVE-2023-41175Fix available6.5 Medium
- libtiff, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreLibtiff: integer overflow in tiffcp.cCVE-2023-40745Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattrCVE-2023-3773Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreKernel: xfrm: null pointer dereference in xfrm_update_ae_params()CVE-2023-3772Fix available5.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user sp…CVE-2023-3640Public exploitFix available7.0 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreKernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_fragsCVE-2023-3812Fix available7.8 High
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: registrar is subject to a dos against ssl connectionsCVE-2023-38200Fix available7.5 High
- linux kernel, canonical ubuntu linux, red hat enterprise linux 6 +9 more +11 moreKernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to raceCVE-2023-3567Fix available7.1 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +17 more +19 moreQemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()CVE-2023-3019Fix available6.0 Medium
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: memory leak in tiffcrop.cCVE-2023-3576Fix available5.5 Medium
- redhat libvirt, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreLibvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of serviceCVE-2023-3750Fix available6.5 Medium
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: spotlight server-side share path disclosureCVE-2023-34968Fix available5.3 Medium
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: type confusion in mdssvc rpc service for spotlightCVE-2023-34967Fix availableEPSS 61.2%5.3 Medium
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: infinite loop in mdssvc rpc service for spotlightCVE-2023-34966Fix availableEPSS 62.4%7.5 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 moreSamba: smb2 packet signing is not enforced when "server signing = required" is setCVE-2023-3347Fix available5.9 Medium
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: out-of-bounds read in winbind auth_crapCVE-2022-2127Fix available5.9 Medium
- tats w3m, fedora extra packages for enterprise linux, fedora +2 more +4 moreW3m: out of bounds read in growbuf_to_str() at w3m/indep.cCVE-2023-38253Fix available4.7 Medium
- tats w3m, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreW3m: out of bounds read in strnew_size() at w3m/str.cCVE-2023-38252Fix available4.7 Medium
- libtiff, debian linux, fedora +5 more +7 moreSegmentation fault in fax3encode in libtiff/tif_fax3.cCVE-2023-3618Fix available6.5 Medium
- qemu, fedora extra packages for enterprise linux, fedora +8 more +10 moreImproper i/o watch removal in tls handshake can lead to remote unauthenticated denial of serviceCVE-2023-3354Fix available7.5 High
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- Show moreLoading…