Redhat Enterprise Linux Server Eus vulnerabilities

• polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 more A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec... CVE-2021-4034 In KEVPublic exploitFix available EPSS 94.9% 7.8 HighJanuary 25, 2022
• debian linux, linux kernel, fedoraproject fedora +20 more +22 more Important: kernel security, bug fix, and enhancement update CVE-2021-3744 Fix available 5.5 MediumSeptember 15, 2021
• linux kernel, fedoraproject fedora, redhat codeready linux builder +12 more +14 more A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking... CVE-2021-3659 Fix available 5.5 MediumAugust 10, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code... CVE-2021-20233 Public exploitFix available 8.2 HighMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to... CVE-2021-20225 Fix available 6.7 MediumMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure... CVE-2020-27779 Fix available 7.5 HighMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the... CVE-2020-27749 Fix available 6.7 MediumMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. During USB device initialization,... CVE-2020-25647 Fix available 7.6 HighMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the... CVE-2020-25632 Public exploitFix available 8.2 HighMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp cloud backup +6 more +8 more A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of... CVE-2020-14372 Public exploitFix available 7.5 HighMarch 2, 2021
• kde, kde konqueror, redhat enterprise linux +3 more +5 more The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to... CVE-2012-4512 Public exploit EPSS 11.7% 8.8 HighFebruary 8, 2020
• abrt, redhat automatic bug reporting tool, enterprise linux desktop +5 more +7 more daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports... CVE-2015-3147 6.5 MediumJanuary 14, 2020
• openslp, vmware esxi, horizon daas +14 more +16 more OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has... CVE-2019-5544 In KEVPublic exploitFix available EPSS 98.1% 9.8 CriticalDecember 6, 2019
• intel graphics driver, canonical ubuntu linux, intel atom x5-e3930 firmware +354 more +356 more Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and... CVE-2019-0155 Fix available 7.8 HighNovember 12, 2019
• canonical ubuntu linux, debian linux, f5 big-ip access policy manager +775 more +777 more Improper invalidation for page table updates by a virtual guest operating system for multiple... CVE-2018-12207 Fix available 6.5 MediumNovember 12, 2019
• artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 more A flaw was found in ghostscript, versions 9.x before 9.28, in the setsystemparams procedure where... CVE-2019-14813 Fix available EPSS 11.0% 7.3 HighAugust 28, 2019
• artifex ghostscript, redhat 3scale api management, enterprise linux +6 more +8 more It was found that the .buildfont1 procedure did not properly secure its privileged calls,... CVE-2019-10216 Fix available 7.3 HighAugust 12, 2019
• microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1703 +36 more +38 more Windows Kernel Information Disclosure Vulnerability CVE-2019-1125 Public exploitFix available 5.6 MediumAugust 6, 2019
• redhat 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux server eus +2 more It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17,... CVE-2019-10171 Fix available 7.5 HighAugust 2, 2019
• icedtea icedtea-web, redhat enterprise linux desktop, enterprise linux server +3 more +5 more It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/>... CVE-2019-10182 Fix available 8.2 HighJuly 31, 2019
• linux kernel, netapp cloud backup, h300e firmware +18 more +20 more A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x... CVE-2018-16871 Fix available 7.5 HighJuly 4, 2019
• libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 more The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x... CVE-2019-10168 Fix available 8.8 HighJune 21, 2019
• libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 more The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before... CVE-2019-10167 Fix available 8.8 HighJune 20, 2019
• libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 more It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would... CVE-2019-10166 Fix available 7.8 HighJune 20, 2019
• isc bind, redhat enterprise linux server aus, enterprise linux server eus +1 more +3 more A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker... CVE-2017-3139 Fix available 7.5 HighApril 9, 2019
• python, canonical ubuntu linux, debian linux +11 more +13 more urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for... CVE-2019-9948 Fix available EPSS 11.8% 9.1 CriticalMarch 23, 2019
• artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 more It was found that the forceput operator could be extracted from the DefineResource method in... CVE-2019-3838 Fix available 7.3 HighMarch 21, 2019
• artifex ghostscript, debian linux, fedoraproject fedora +8 more +10 more It was found that the superexec operator was available in the internal dictionary in ghostscript... CVE-2019-3835 Fix available 7.3 HighMarch 21, 2019
• canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +8 more +10 more A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse... CVE-2019-3878 Fix available 8.1 HighMarch 21, 2019
• libssh2, debian linux, netapp ontap select deploy administration utility +10 more +12 more A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive... CVE-2019-3863 Fix available 7.5 HighMarch 19, 2019
• libssh2, debian linux, fedoraproject fedora +13 more +15 more An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2... CVE-2019-3857 Fix available 7.5 HighMarch 19, 2019
• libssh2, debian linux, fedoraproject fedora +13 more +15 more An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2... CVE-2019-3856 Fix available 7.5 HighMarch 19, 2019
• libssh2, apple xcode, debian linux +14 more +16 more An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2... CVE-2019-3855 Fix available 7.5 HighMarch 19, 2019
• [unknown] openwsman, fedoraproject fedora, opensuse leap +8 more +10 more Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure... CVE-2019-3816 Fix available EPSS 14.7% 7.5 HighMarch 14, 2019
• python, canonical ubuntu linux, debian linux +16 more +18 more Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode... CVE-2019-9636 Fix available 9.8 CriticalMarch 8, 2019
• debian linux, linux kernel, canonical ubuntu linux +12 more +14 more The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. CVE-2019-7221 Fix available 7.8 HighFebruary 20, 2019
• systemd project systemd, canonical ubuntu linux, debian linux +19 more +21 more An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus... CVE-2019-6454 Fix available 5.5 MediumFebruary 18, 2019
• debian linux, linux kernel, canonical ubuntu linux +21 more +23 more In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles... CVE-2019-6974 Public exploitFix available EPSS 16.5% 8.1 HighFebruary 15, 2019
• flatpak, debian linux, redhat enterprise linux desktop +5 more +7 more Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script... CVE-2019-8308 Fix available 8.2 HighFebruary 12, 2019
• mozilla firefox, canonical ubuntu linux, debian linux +9 more +11 more When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)... CVE-2018-18506 Fix available 5.9 MediumJanuary 30, 2019
• mozilla firefox, firefox esr, thunderbird +8 more +10 more An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added... CVE-2018-18505 Fix available 10.0 CriticalJanuary 30, 2019
• mozilla firefox, firefox esr, thunderbird +7 more +9 more Mozilla developers and community members reported memory safety bugs present in Firefox 64 and... CVE-2018-18501 Fix available 9.8 CriticalJanuary 30, 2019
• mozilla firefox, firefox esr, thunderbird +8 more +10 more A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom... CVE-2018-18500 Public exploitFix available EPSS 12.7% 9.8 CriticalJanuary 30, 2019
• red hat, inc. spice, canonical ubuntu linux, debian linux +6 more +8 more Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by... CVE-2019-3813 Fix available 7.5 HighJanuary 28, 2019
• debian linux, systemd, redhat enterprise linux desktop +5 more +7 more A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise... CVE-2019-3815 Fix available 3.3 LowJanuary 28, 2019
• artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 more In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system... CVE-2019-6116 Public exploitFix available EPSS 41.6% 7.8 HighJanuary 23, 2019
• oracle corporation java, canonical ubuntu linux, debian linux +16 more +18 more Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported... CVE-2019-2422 Fix available 3.1 LowJanuary 16, 2019
• polkit project polkit, canonical ubuntu linux, debian linux +6 more +8 more In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because... CVE-2019-6133 Fix available 6.7 MediumJanuary 11, 2019
• systemd, canonical ubuntu linux, debian linux +8 more +10 more An allocation of memory without limits, that could result in the stack clashing with another... CVE-2018-16865 Fix available 7.5 HighJanuary 9, 2019
• systemd, canonical ubuntu linux, debian linux +8 more +10 more An allocation of memory without limits, that could result in the stack clashing with another... CVE-2018-16864 Fix available 7.4 HighJanuary 9, 2019
• Show olderLoading…