Redhat Enterprise Linux Workstation vulnerabilities

• debian linux, linux kernel, fedoraproject fedora +15 more +17 more Use-after-free in Linux kernel's netfilter: nf_tables component CVE-2024-1086 In KEVPublic exploitFix available EPSS 28.1% 7.8 HighJanuary 31, 2024
• x.org xwayland, fedoraproject fedora, red hat enterprise linux 6 +13 more +15 more Xorg-x11-server: selinux context corruption CVE-2024-0409 Fix available 7.8 HighJanuary 16, 2024
• fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +13 more +15 more Xorg-x11-server: selinux unlabeled glx pbuffer CVE-2024-0408 Fix available 5.5 MediumJanuary 16, 2024
• debian linux, fedoraproject fedora, red hat enterprise linux 6 +19 more +21 more Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer CVE-2023-6816 Fix available 9.8 CriticalJanuary 16, 2024
• freeipa, fedoraproject fedora, red hat enterprise linux 6 +32 more +34 more Ipa: invalid csrf protection CVE-2023-5455 Fix available 6.5 MediumJanuary 10, 2024
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 more Postgresql: buffer overrun from integer overflow in array modification CVE-2023-5869 Fix available 8.8 HighNovember 10, 2023
• squid-cache squid, red hat enterprise linux 6 extended lifecycle support, enterprise linux 7 +22 more +24 more Squid: denial of service in http digest authentication CVE-2023-46847 Fix available EPSS 78.5% 8.6 HighNovember 2, 2023
• debian linux, fedoraproject fedora, red hat enterprise linux 6 +25 more +27 more Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty CVE-2023-5367 Fix available 7.8 HighOctober 25, 2023
• redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 more Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration CVE-2023-3899 Fix available 7.8 HighAugust 22, 2023
• fedoraproject sssd, redhat enterprise linux, enterprise linux desktop +10 more +12 more sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters CVE-2022-4254 Fix available 8.8 HighJanuary 27, 2023
• containers podman, redhat enterprise linux server, enterprise linux workstation +2 more The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190... CVE-2022-2739 5.3 MediumSeptember 1, 2022
• containers podman, redhat enterprise linux server, enterprise linux workstation +2 more The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190... CVE-2022-2738 7.5 HighSeptember 1, 2022
• podman project podman, fedoraproject fedora, psgo project psgo +13 more +15 more Podman publishes a malicious image to public registries CVE-2022-1227 Public exploitFix available 8.8 HighApril 29, 2022
• port389 389-ds-base, redhat enterprise linux desktop, enterprise linux for ibm z systems +5 more +7 more A double-free was found in the way 389-ds-base handles virtual attributes context in persistent... CVE-2021-4091 Fix available 7.5 HighFebruary 18, 2022
• samba, canonical ubuntu linux, debian linux +20 more +22 more The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced... CVE-2021-44142 Public exploitFix available EPSS 73.6% 8.8 HighJanuary 31, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 more Important: kernel security, bug fix, and enhancement update CVE-2022-0330 Fix available 7.8 HighJanuary 26, 2022
• polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 more A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec... CVE-2021-4034 In KEVPublic exploitFix available EPSS 94.9% 7.8 HighJanuary 25, 2022
• samba, canonical ubuntu linux, debian linux +14 more +16 more A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos... CVE-2020-25719 Fix available 7.2 HighNovember 9, 2021
• samba, canonical ubuntu linux, debian linux +22 more +24 more A flaw was found in the way Samba maps domain users to local users. An authenticated attacker... CVE-2020-25717 Fix available 8.1 HighNovember 9, 2021
• samba, canonical ubuntu linux, debian linux +21 more +23 more A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this... CVE-2016-2124 Fix available 5.9 MediumNovember 9, 2021
• microsoft hivex, fedoraproject fedora, redhat enterprise linux +1 more +3 more A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted... CVE-2021-3622 Fix available 4.3 MediumSeptember 23, 2021
• apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 more mod_proxy SSRF CVE-2021-40438 In KEVPublic exploitFix available EPSS 100.0% 9.0 CriticalSeptember 16, 2021
• kernel kvm, linux kernel, fedoraproject fedora +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2021-3656 Public exploitFix available 8.8 HighAugust 16, 2021
• c-ares, fedoraproject fedora, nodejs node.js +14 more +16 more A flaw was found in c-ares library, where a missing input validation check of host names returned... CVE-2021-3672 Fix available 5.6 MediumAugust 10, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code... CVE-2021-20233 Public exploitFix available 8.2 HighMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to... CVE-2021-20225 Fix available 6.7 MediumMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure... CVE-2020-27779 Fix available 7.5 HighMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the... CVE-2020-27749 Fix available 6.7 MediumMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. During USB device initialization,... CVE-2020-25647 Fix available 7.6 HighMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the... CVE-2020-25632 Public exploitFix available 8.2 HighMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp cloud backup +6 more +8 more A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of... CVE-2020-14372 Public exploitFix available 7.5 HighMarch 2, 2021
• icu-project international components for unicode, canonical ubuntu linux, debian linux +11 more +13 more An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An... CVE-2020-10531 Fix available 8.8 HighMarch 12, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to... CVE-2020-6386 Fix available 8.8 HighFebruary 27, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to... CVE-2020-6384 Fix available 8.8 HighFebruary 27, 2020
• google chrome, debian linux, fedoraproject fedora +3 more +5 more Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to... CVE-2020-6383 Fix available 8.8 HighFebruary 27, 2020
• google chrome, debian linux, fedoraproject fedora +4 more +6 more Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to... CVE-2020-6418 In KEVPublic exploitFix available EPSS 78.8% 8.8 HighFebruary 26, 2020
• apple icloud, icloud for windows, ipados +9 more +11 more A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7... CVE-2020-3864 Fix available 7.8 HighFebruary 14, 2020
• adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 more Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and... CVE-2020-3757 Fix available EPSS 10.2% 8.8 HighFebruary 13, 2020
• gpgme project gpgme, fedoraproject fedora, redhat enterprise linux for ibm z systems +6 more +8 more GPGME Go wrapper contains Use After Free CVE-2020-8945 Fix available 7.5 HighFebruary 12, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6416 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a... CVE-2020-6415 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local... CVE-2020-6408 Fix available 6.5 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +4 more +6 more Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to... CVE-2020-6406 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a local... CVE-2020-6404 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a... CVE-2020-6403 Fix available 4.3 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87... CVE-2020-6402 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6400 Fix available 6.5 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6398 Fix available 8.8 HighFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6397 Fix available 6.5 MediumFebruary 8, 2020
• google chrome, debian linux, fedoraproject fedora +5 more +7 more Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote... CVE-2020-6396 Fix available 4.3 MediumFebruary 8, 2020
• Show olderLoading…