Skip to contentRedhat Enterprise Linux Desktop vulnerabilities
- [unknown] libtirpc, canonical ubuntu linux, debian linux +5 more +7 moreA null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The...CVE-2018-14622Fix available5.3 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moredwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote...CVE-2018-16062Fix available5.5 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could...CVE-2018-15911Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...CVE-2018-15910Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could...CVE-2018-15909Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreIn Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript...CVE-2018-15908Fix available7.8 High
- apache mod perl, canonical ubuntu linux, debian linux +4 more +6 moremod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a...CVE-2011-2767Fix available9.8 Critical
- x.org libx11, canonical ubuntu linux, debian linux +4 more +6 moreAn issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is...CVE-2018-14599Fix available9.8 Critical
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreA cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM...CVE-2018-10846Fix available5.3 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen...CVE-2018-10845Fix available5.9 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen...CVE-2018-10844Fix available5.9 Medium
- linux kernel, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that the raw midi kernel driver does not protect against concurrent access which...CVE-2018-10902Fix available7.8 High
- ibm sdk, sdk, java technology edition, oracle enterprise manager base platform +4 more +6 moreThe IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java...CVE-2018-16567.4 High
- ibm sdk, java technology edition, software development kit, redhat enterprise linux desktop +3 more +5 moreA flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow...CVE-2018-15175.9 Medium
- libvirt, redhat enterprise linux, enterprise linux desktop +7 more +9 morelibvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block...CVE-2015-5160Fix available5.5 Medium
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability"...CVE-2018-12828Fix available9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful...CVE-2018-12827Public exploitFix availableEPSS 31.7%7.5 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful...CVE-2018-12826Fix available7.5 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful...CVE-2018-12825Fix available9.8 Critical
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful...CVE-2018-12824Fix availableEPSS 10.7%5.9 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...CVE-2018-15473Public exploitFix availableEPSS 98.7%5.3 Medium
- spice project spice, [unknown] spice:, canonical ubuntu linux +9 more +11 moreA vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for...CVE-2018-10873Fix available8.3 High
- samba, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreA flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1...CVE-2018-1139Fix available5.4 Medium
- samba, canonical ubuntu linux, debian linux +5 more +7 moreA heap-buffer overflow was found in the way samba clients processed extra long filename in a...CVE-2018-10858Fix available4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +48 more +50 moreThe Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packetsCVE-2018-5391Public exploitFix availableEPSS 32.1%7.5 High
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedCVE-2018-5740Public exploitFix availableEPSS 60.2%7.5 High
- postgresql, canonical ubuntu linux, debian linux +6 more +8 moreA vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to...CVE-2018-10915Fix available8.5 High
- debian linux, linux kernel, a10networks advanced core operating system +35 more +37 moreLinux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of serviceCVE-2018-5390Fix availableEPSS 71.8%7.5 High
- rpm yum-utils, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreA directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to...CVE-2018-10897Fix available8.8 High
- x libxcursor, canonical ubuntu linux, debian linux +4 more +6 more_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause...CVE-2015-9262Fix available9.8 Critical
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...CVE-2018-14682Fix available8.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad...CVE-2018-14681Fix available8.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank...CVE-2018-14680Fix available6.5 Medium
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...CVE-2018-14679Fix available6.5 Medium
- red hat postgresql init script, redhat enterprise linux desktop, enterprise linux server +3 more +5 morePrivilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An...CVE-2017-150976.5 Medium
- linux kernel, kernel:, redhat enterprise linux desktop +3 more +5 moreIt was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation...CVE-2017-26347.5 High
- red hat ipa, freeipa, redhat enterprise linux +5 more +7 moreA vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did...CVE-2017-2590Fix available8.1 High
- linux kernel, [unknown] kernel:, redhat enterprise linux desktop +3 more +5 moreA flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore...CVE-2018-109017.8 High
- red hat httpd, redhat enterprise linux, apache http server +3 more +5 moreA regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing...CVE-2017-121716.5 Medium
- [unknown] pki-core, dogtagpki, redhat enterprise linux desktop +2 more +4 moreIt was found that a mock CMC authentication plugin with a hardcoded secret was accidentally...CVE-2017-7537Fix available5.9 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient enforcement of file access permission in the activeTab case in Extensions in Google...CVE-2018-6179Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreEliding from the wrong side in an infobar in DevTools in Google Chrome prior to 68.0.3440.75...CVE-2018-6178Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440...CVE-2018-6175Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInteger overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a...CVE-2018-6174Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440...CVE-2018-6173Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440...CVE-2018-6172Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to...CVE-2018-6170Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75...CVE-2018-6169Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440...CVE-2018-6167Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440...CVE-2018-6166Fix available6.5 Medium
- Show moreLoading…