Skip to contentRedhat Enterprise Linux Server vulnerabilities
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreIn the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization,...CVE-2018-5344Fix available7.8 High
- gnome gcab, canonical ubuntu linux, debian linux +7 more +9 moreA stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious...CVE-2018-5345Fix available7.8 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreIn glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be...CVE-2018-1000001Public exploitFix availableEPSS 13.4%7.8 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn Out-of-bounds Read issue was discovered in Adobe Flash Player before 28.0.0.137. This...CVE-2018-4871Fix available7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA use-after-free vulnerability was found in network namespaces code affecting the Linux kernel...CVE-2017-15129Fix available4.7 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreThe timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before...CVE-2017-18344Public exploitFix available5.5 Medium
- debian linux, linux kernel, arista eos +26 more +28 moreThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,...CVE-2017-18017Fix availableEPSS 52.8%9.8 Critical
- mozilla thunderbird, debian linux, redhat enterprise linux +5 more +7 moreRSS fields can inject new lines into the created email structure, modifying the message body....CVE-2017-7848Fix available5.3 Medium
- mozilla thunderbird, debian linux, redhat enterprise linux aus +4 more +6 moreCrafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name....CVE-2017-7847Fix available4.3 Medium
- mozilla thunderbird, debian linux, redhat enterprise linux desktop +4 more +6 moreIt is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website,...CVE-2017-7846Fix available8.8 High
- mozilla thunderbird, canonical ubuntu linux, debian linux +5 more +7 moreIt is possible to spoof the sender's email address and display an arbitrary sender address to the...CVE-2017-7829Fix available5.3 Medium
- isc dhcp, canonical ubuntu linux, debian linux +6 more +8 moreFailure to properly clean up closed OMAPI connections can exhaust available socketsCVE-2017-3144Fix availableEPSS 72.7%5.3 Medium
- gnu glibc, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreelf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and...CVE-2017-16997Public exploitFix available7.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239...CVE-2017-15429Fix available6.1 Medium
- ruby-lang ruby, debian linux, redhat enterprise linux desktop +5 more +7 moreRuby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,...CVE-2017-17405Public exploitFix availableEPSS 73.8%8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreA regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the...CVE-2017-11305Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreOut-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a...CVE-2017-15407Fix available8.8 High
- mozilla firefox, firefox esr, debian linux +5 more +7 moreWhen Private Browsing mode is used, it is possible for a web worker to write persistent data to...CVE-2017-7843Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic...CVE-2017-1000407Fix available7.4 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a...CVE-2017-15427Fix available6.1 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a...CVE-2017-15426Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a...CVE-2017-15425Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a...CVE-2017-15424Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a...CVE-2017-15423Fix available5.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63...CVE-2017-15420Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84...CVE-2017-15419Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote...CVE-2017-15418Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0...CVE-2017-15417Fix available5.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker...CVE-2017-15416Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker...CVE-2017-15415Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreType confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote...CVE-2017-15413Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to...CVE-2017-15411Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to...CVE-2017-15410Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to...CVE-2017-15409Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker...CVE-2017-15408Fix available8.8 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +7 more +9 moreInteger overflow in international date handling in International Components for Unicode (ICU) for...CVE-2017-15422Fix available6.5 Medium
- google chrome, xmlsoft libxml2, debian linux +3 more +5 moreNokogiri gem, via libxml, is affected by DoS vulnerabilitiesCVE-2017-15412Fix available8.8 High
- debian linux, linux kernel, redhat enterprise linux desktop +6 more +8 moreThe Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing...CVE-2017-1000410Fix available7.5 High
- red hat enterprise linux, red hat, inc. hat enterprise linux, redhat enterprise linux desktop +5 more +7 moreA non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an...CVE-2017-15121Fix available5.5 Medium
- liblouis, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreA missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of...CVE-2017-15101Fix available7.8 High
- samba, canonical ubuntu linux, debian linux +3 more +5 moreSamba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging...CVE-2017-15275Fix availableEPSS 21.4%7.5 High
- samba, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute...CVE-2017-14746Fix available9.8 Critical
- mit krb5, kerberos 5, redhat enterprise linux +3 more +5 moreAn authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1...CVE-2017-7562Fix available6.5 Medium
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...CVE-2017-3114Fix available9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...CVE-2017-3112Fix available9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...CVE-2017-11225Fix available9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...CVE-2017-11215Fix available9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...CVE-2017-11213Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...CVE-2017-7830Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur when flushing and resizing layout because the ...CVE-2017-7828Fix available9.8 Critical
- Show moreLoading…