Skip to contentRedhat Enterprise Linux Desktop vulnerabilities
- redhat enterprise linux, enterprise linux desktop +1 moreA certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure...CVE-2008-43136.0 Medium
- redhat enterprise linux, enterprise linux desktop +1 morepam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option...CVE-2008-3825Fix available4.4 Medium
- xmlsoft libxml2, apple iphone os, safari +8 more +10 morelibxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an...CVE-2008-3281Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreQEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to...CVE-2008-1945Fix available2.1 Low
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound...CVE-2008-32722.1 Low
- linux kernel, redhat enterprise linux, enterprise linux desktop +2 moreRace condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used...CVE-2008-2365Public exploit4.7 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreThe ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the...CVE-2008-2364Fix availableEPSS 12.7%5.0 Medium
- redhat desktop, enterprise linux, enterprise linux desktop +2 more +4 moreBuffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause...CVE-2008-1767Public exploitFix availableEPSS 12.8%7.5 High
- redhat enterprise linux, enterprise linux desktop +1 moreLinux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows...CVE-2008-16154.9 Medium
- redhat enterprise linux, enterprise linux desktop +1 moreThe IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of...CVE-2007-62827.1 High
- redhat enterprise linux, enterprise linux desktop +1 moreLinux kernel before 2.4.21 allows local users to cause a denial of service (kernel panic) via...CVE-2007-50014.9 Medium
- redhat enterprise linux, enterprise linux desktop +1 moreThe Linux kernel 2.6.9 before 2.6.9-67 in Red Hat Enterprise Linux (RHEL) 4 on Itanium (ia64)...CVE-2007-41307.2 High
- apache http server, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreCRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and...CVE-2008-0456EPSS 19.0%2.6 Low
- apache http server, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreCross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server...CVE-2008-0455Public exploitFix availableEPSS 64.9%4.3 Medium
- oracle linux, redhat enterprise linux, centos +6 more +8 moreRed Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable...CVE-2007-62834.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and...CVE-2007-62062.1 Low
- redhat enterprise linux, enterprise linux desktop +1 morePerl-Compatible Regular Expression (PCRE) library before 6.7 does not properly calculate the...CVE-2006-7226Fix available4.3 Medium
- redhat linux, fedoraproject fedora core, redhat enterprise linux +1 more +3 moreThe init.d script for the X.Org X11 xfs font server on various Linux distributions might allow...CVE-2007-3103Public exploitFix available6.2 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreCross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP...CVE-2006-5752Fix availableEPSS 27.8%4.3 Medium
- redhat enterprise linux, enterprise linux desktop +1 moreThe Linux kernel before 2.6.9-42.0.8 in Red Hat 4.4 allows local users to cause a denial of...CVE-2007-07734.6 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreApache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a...CVE-2007-3304Fix available4.7 Medium
- x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +6 more +8 moreInteger overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows...CVE-2007-1352Fix available3.8 Low
- x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +5 more +7 moreInteger overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before...CVE-2007-1351Fix available8.5 High
- apache mod perl, canonical ubuntu linux, redhat enterprise linux desktop +4 more +6 morePerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not...CVE-2007-1349Fix availableEPSS 10.4%5.0 Medium
- php, canonical ubuntu linux, novell suse linux +4 more +6 moreThe Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a...CVE-2007-1285Public exploitEPSS 18.8%7.5 High
- ekiga, redhat enterprise linux, enterprise linux desktop +2 moreFormat string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a...CVE-2007-1007Fix available10.0 High
- linux kernel, redhat enterprise linux, enterprise linux desktop +2 moreUnspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is...CVE-2006-57537.2 High
- gd graphics library project graphics library, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreBuffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and...CVE-2007-0455Fix availableEPSS 12.3%7.5 High
- gnu privacy guard, gpg4win, redhat enterprise linux +4 more +6 moreA "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0...CVE-2006-6235Fix available10.0 High
- debian linux, fedoraproject fedora core, redhat enterprise linux +5 more +7 morepam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other...CVE-2006-5170Fix available7.5 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote...CVE-2006-51587.5 High
- kde, redhat enterprise linux, enterprise linux desktop +2 morekdesktop_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not...CVE-2006-2933Fix available4.6 Medium
- gnu tar, redhat enterprise linux, enterprise linux desktop +1 more +3 moreThe original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat...CVE-2005-1918Fix available2.6 Low
- redhat enterprise linux, enterprise linux desktop +1 moreudev does not properly set permissions on certain files in /dev/input, which allows local users...CVE-2005-3631Fix available4.6 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora core +3 more +5 moreMemory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote...CVE-2005-2970Fix availableEPSS 14.2%5.0 Medium
- redhat enterprise linux, enterprise linux desktop +1 moreThe rw_vm function in usercopy.c in the 4GB split patch for the Linux kernel in Red Hat...CVE-2005-21002.1 Low
- redhat enterprise linux, enterprise linux desktop +1 moreinit_dev in tty_io.c in the Red Hat backport of NPTL to Red Hat Enterprise Linux 3 does not...CVE-2005-04037.2 High
- apache http server, debian linux, redhat enterprise linux desktop +2 more +4 moreOff-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache...CVE-2005-1268Fix available5.0 Medium
- redhat sysreport, enterprise linux, enterprise linux desktop +1 more +3 moresysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the...CVE-2005-1760Fix available7.5 High
- redhat enterprise linux, enterprise linux desktop +1 moreThe xattr file system code, as backported in Red Hat Enterprise Linux 3 on 64-bit systems, does...CVE-2005-0757Fix available2.1 Low
- redhat enterprise linux, enterprise linux desktop, linux advanced workstation +2 moreStack-based buffer overflow in the ieee_putascii function for nasm 0.98 and earlier allows...CVE-2005-1194Fix available4.6 Medium
- gnu gzip, freebsd, gentoo linux +9 more +11 moreRace condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local...CVE-2005-0988Fix available3.7 Low
- conectiva linux, linux kernel, redhat enterprise linux +2 more +4 moreThe bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1...CVE-2005-0750Public exploit7.2 High
- ipsec-tools, kame racoon, altlinux alt linux +4 more +6 moreThe KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of...CVE-2005-0398Fix available5.0 Medium
- conectiva linux, linux kernel, redhat enterprise linux +2 more +4 moreInteger overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local...CVE-2005-0736Public exploit2.1 Low
- conectiva linux, linux kernel, redhat enterprise linux +1 more +3 moreUnknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a...CVE-2005-02072.1 Low
- ethereal group ethereal, altlinux alt linux, conectiva linux +3 more +5 moreMultiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector ...CVE-2005-06997.5 High
- freebsd, redhat enterprise linux, enterprise linux desktop +5 more +7 moreHyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel...CVE-2005-01095.6 Medium
- altlinux alt linux, lesstif, mandrakesoft mandrake linux +7 more +9 morescan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value...CVE-2005-0605Fix available7.5 High
- redhat enterprise linux, enterprise linux desktop +1 moreUnknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using...CVE-2005-00917.2 High
- Show moreLoading…