Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Redhat
Linux

Redhat Linux vulnerabilities

Known exploitedIn KEVPublic exploitFix available

openssl, 4d webstar, apple mac os x +62 more +64 moreThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows...CVE-2004-0079Fix available7.5 HighMarch 17, 2004
gnome gdkpixbuf, redhat enterprise linux, gdk pixbuf +2 more +4 moregdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed...CVE-2004-0111Fix available5.0 MediumMarch 16, 2004
metamail corporation metamail, redhat enterprise linux, linux advanced workstation +1 more +3 moreMultiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary...CVE-2004-01057.5 HighFebruary 19, 2004
metamail corporation metamail, redhat enterprise linux, linux advanced workstation +1 more +3 moreMultiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to...CVE-2004-0104Public exploitEPSS 26.2%7.5 HighFebruary 19, 2004
redhat tcpdump, linux +1 moretcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via...CVE-2003-0989Fix available7.5 HighJanuary 15, 2004
redhat enterprise linux, suse linux +1 moreUnspecified vulnerability in xscreensaver 4.12, and possibly other versions, allows attackers to...CVE-2003-1295Fix available2.1 LowDecember 31, 2003
linux kernel, redhat enterprise linux +1 moreVarious routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2...CVE-2003-09861.7 LowDecember 31, 2003
redhat enterprise linuxThe (1) ipq_read and (2) ipulog_read functions in iptables allow local users to cause a denial of...CVE-2003-08574.6 MediumDecember 31, 2003
gnu glibc, zebra, intel ia64 +4 more +6 moreThe getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a...CVE-2003-08594.9 MediumNovember 18, 2003
redhat enterprise linuxThe getgrouplist function in GNU libc (glibc) 2.2.4 and earlier allows attackers to cause a...CVE-2003-0689Fix available7.5 HighSeptember 3, 2003
redhat enterprise linux, linux advanced workstation +1 moreThe C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access...CVE-2003-06997.5 HighAugust 22, 2003
gnome gdm, redhat enterprise linux, kdebase +1 more +3 moreThe X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to...CVE-2003-05495.0 MediumAugust 22, 2003
gnome gdm, redhat enterprise linux, kdebase +1 more +3 moreThe X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to...CVE-2003-05485.0 MediumAugust 22, 2003
redhat linuxLinux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose...CVE-2003-05525.0 MediumJuly 25, 2003
redhat linuxThe STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which...CVE-2003-05515.0 MediumJuly 25, 2003
redhat linuxThe STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design,...CVE-2003-05505.0 MediumJuly 25, 2003
redhat linuxThe RPC code in Linux kernel 2.4 sets the reuse flag when sockets are created, which could allow...CVE-2003-04644.6 MediumJuly 25, 2003
redhat linux/proc/tty/driver/serial in Linux 2.4.x reveals the exact number of characters used in serial...CVE-2003-04612.1 LowJuly 25, 2003
php, redhat linux +1 moreCross-site scripting (XSS) vulnerability in the transparent SID support capability for PHP before...CVE-2003-0442Public exploitFix available4.3 MediumJune 20, 2003
adobe acrobat, xpdf, mandrakesoft mandrake linux +4 more +6 moreVarious PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to...CVE-2003-0434Public exploitFix availableEPSS 40.9%7.5 HighJune 18, 2003
kde, kde konqueror embedded, apple safari +3 more +5 moreKonqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name (CN) field for X...CVE-2003-03707.5 HighJune 5, 2003
redhat linuxThe TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause...CVE-2003-03645.0 MediumJune 5, 2003
redhat linuxUnknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary...CVE-2003-03547.5 HighJune 5, 2003
redhat linuxThe mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed...CVE-2003-024810.0 HighJune 5, 2003
redhat linuxUnknown vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial...CVE-2003-02475.0 MediumJune 5, 2003
redhat linuxBuffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a...CVE-2002-1155Public exploit7.2 HighJune 5, 2003
redhat tcpdump, linux +1 moretcpdump does not properly drop privileges to the pcap user when starting up.CVE-2003-01944.6 MediumMay 17, 2003
lv, redhat linux +1 morelv reads a .lv file from the current working directory, which allows local users to execute...CVE-2003-0188Fix available7.2 HighMay 15, 2003
redhat linuxvsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers (tcp_wrappers) but is...CVE-2003-01357.5 HighApril 3, 2003
redhat linuxA patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with...CVE-2002-15093.6 LowMarch 3, 2003
redhat linuxuml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges,...CVE-2003-0019Public exploit7.2 HighFebruary 19, 2003
redhat linuxThe default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions,...CVE-2002-11607.2 HighFebruary 19, 2003
mit kerberos ftp client, mandrakesoft mandrake linux, mandrake multi network firewall +1 more +3 moreKerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in...CVE-2003-004110.0 HighFebruary 1, 2003
debian linux, mandrakesoft mandrake linux, microsoft windows 98 +6 more +8 moreThe Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via...CVE-2002-21854.9 MediumDecember 31, 2002
gnome bonobo, mandrakesoft mandrake linux, redhat linux +2 moreBuffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute...CVE-2002-1814Public exploit4.6 MediumDecember 31, 2002
safe.pm, redhat enterprise linux, linux advanced workstation +6 more +8 moreSafe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out...CVE-2002-1323Fix available4.6 MediumDecember 11, 2002
hp secure os, mandrakesoft mandrake linux, redhat linux +2 moredvips converter for Postscript files in the tetex package calls the system() function insecurely,...CVE-2002-0836Fix available7.5 HighOctober 28, 2002
debian linux, hp secure os +1 moreMemory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier...CVE-2002-1232Fix available5.0 MediumOctober 21, 2002
redhat linux, hp secure os, mandrakesoft mandrake linux +2 more +4 moresetpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other...CVE-2002-06386.2 MediumAugust 12, 2002
redhat linuxBuffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow...CVE-2002-05067.2 HighAugust 12, 2002
immunix, netbsd, openbsd +1 more +3 moreFormat string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd...CVE-2000-12087.2 HighAugust 1, 2002
openbsd openssh, conectiva linux, engardelinux secure linux +5 more +7 moreOff-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote...CVE-2002-0083Public exploitEPSS 14.7%9.8 CriticalMarch 15, 2002
samba rsync, redhat linux +1 morersync, when running in daemon mode, does not properly call setgroups before dropping privileges,...CVE-2002-00802.1 LowMarch 15, 2002
squid, redhat linux +1 moreMemory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of...CVE-2002-00692.6 LowMarch 8, 2002
squid, redhat linux +1 moreSquid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump)...CVE-2002-0068Public exploit7.5 HighMarch 8, 2002
squid, redhat linux +1 moreSquid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is...CVE-2002-00677.5 HighMarch 8, 2002
debian linux, invisible-island ncurses, freebsd +2 moreBuffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux,...CVE-2002-00627.2 HighMarch 8, 2002
caldera openlinux server, openlinux workstation, debian linux +3 more +5 moreHeap corruption vulnerability in the "at" program allows local users to execute arbitrary code...CVE-2002-0004Public exploit7.2 HighFebruary 27, 2002
openldap, redhat linux +1 moreslapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to...CVE-2002-00457.5 HighJanuary 31, 2002
gnu enscript, debian linux +1 moreGNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript...CVE-2002-00443.6 LowJanuary 31, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open