Skip to contentRedhat Linux vulnerabilities
- opensuse, redhat enterprise linux +1 moreThe SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a...CVE-2013-02231.9 Low
- opensuse, redhat enterprise linux +1 moreThe SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a...CVE-2013-02222.1 Low
- opensuse, redhat enterprise linux +1 moreThe SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a...CVE-2013-0221Public exploit4.3 Medium
- augeas, redhat enterprise linux +1 moreThe clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set...CVE-2012-0787Fix available3.7 Low
- fedoraproject 389 directory server, redhat directory server, enterprise linux +2 more389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote...CVE-2013-4485Fix available4.0 Medium
- scientificlinux luci, redhat enterprise linux +1 moreUntrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when...CVE-2013-44826.2 Medium
- scientificlinux luci, redhat enterprise linux +1 moreRace condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions...CVE-2013-44811.9 Low
- busybox, redhat enterprise linux, t-mobile tm-ac1900 +2 moreutil-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when...CVE-2013-1813Fix available7.2 High
- clusterlabs pacemaker, redhat enterprise linux +1 morePacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management...CVE-2013-0281Fix available4.3 Medium
- scipy, debian linux, fedoraproject fedora +1 more +3 moreSciPy creates insecure temporary directoriesCVE-2013-4251Fix available7.8 High
- canonical ubuntu linux, debian linux, fujitsu sparc enterprise m3000 firmware +58 more +60 moreThe RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state...CVE-2015-2808Fix availableEPSS 73.9%5.0 Medium
- ibm java, redhat enterprise linux desktop, enterprise linux server +5 more +7 moreUnspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1...CVE-2015-01927.5 High
- spice project spice, redhat enterprise linux, enterprise virtualization +2 moreStack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0...CVE-2013-4282Fix available5.0 Medium
- feep libtar, redhat enterprise linux +1 moreMultiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow...CVE-2013-4397Fix available6.8 Medium
- oracle javafx, jdk, jre +5 more +7 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5...CVE-2013-584310.0 High
- canonical ubuntu linux, oracle jdk, jre +5 more +7 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5...CVE-2013-5842Public exploitEPSS 17.6%10.0 High
- oracle jrockit, canonical ubuntu linux, oracle jdk +6 more +8 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5...CVE-2013-583010.0 High
- canonical ubuntu linux, oracle jdk, jre +5 more +7 moreUnspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5...CVE-2013-582910.0 High
- oracle mysql, canonical ubuntu linux, debian linux +4 more +6 moreUnspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32 and 5.6.x through 5.6.12...CVE-2013-58074.9 Medium
- oracle mysql, canonical ubuntu linux, debian linux +4 more +6 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5...CVE-2013-38394.0 Medium
- xinetd, redhat enterprise linux +1 morexinetd does not enforce the user and group configuration directives for TCPMUX services, which...CVE-2013-4342Fix available7.6 High
- ruby-lang ruby, rubygems, redhat enterprise linux +2 moreRubyGems Regular Expression Denial of Service vulnerabilityCVE-2013-4287Fix available4.3 Medium
- qemu, canonical ubuntu linux, opensuse +4 more +6 moreBuffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has...CVE-2013-4344Fix available7.2 High
- lennart poettering rkit, redhat enterprise linux +1 moreRealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority...CVE-2013-4326Fix available4.6 Medium
- spice-gtk project spice-gtk, redhat enterprise linux +1 morespice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure...CVE-2013-4324Fix available4.6 Medium
- redhat libvirt, canonical ubuntu linux, redhat enterprise linux +2 morelibvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows...CVE-2013-4311Fix available4.6 Medium
- polkit project polkit, canonical ubuntu linux, opensuse +1 more +3 moreRace condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit...CVE-2013-4288Fix available7.2 High
- redhat libvirt, canonical ubuntu linux, redhat enterprise linux +2 moreThe remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x...CVE-2013-4296Fix available4.0 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUse-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function...CVE-2015-0831Fix available6.8 Medium
- gnu glibc, canonical ubuntu linux, opensuse +1 more +3 moreThe send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does...CVE-2013-7423Fix available5.0 Medium
- gnu glibc, redhat enterprise linux +1 moreMultiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and...CVE-2013-4332Fix available4.3 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and...CVE-2012-3406Fix available6.8 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and...CVE-2012-3405Fix available5.0 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and...CVE-2012-3404Fix available5.0 Medium
- freedesktop poppler, opensuse, redhat enterprise linux +1 more +3 moreThe error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute...CVE-2012-2142Fix available7.8 High
- php, canonical ubuntu linux, redhat enterprise linux +2 moreThe openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...CVE-2013-4248Fix available4.3 Medium
- gnome evolution, evolution data server, redhat enterprise linux desktop +2 more +4 moreThe gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and...CVE-2013-4166Fix available7.5 High
- samba, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3...CVE-2013-4124Public exploitFix availableEPSS 69.0%5.0 Medium
- isc bind, dnsco bind, fedoraproject fedora +9 more +11 moreThe RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9...CVE-2013-4854Fix availableEPSS 34.2%7.8 High
- redhat enterprise linux, enterprise linux desktop supplementary, enterprise linux server supplementary +1 more +3 moreUnquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise...CVE-2013-2231Fix available7.2 High
- jeff ortel suds, opensuse, redhat enterprise linux +2 moreImproper Link Resolution Before File Access in SudsCVE-2013-2217Public exploitFix available1.2 Low
- redhat enterprise linuxA certain Red Hat patch to the do_filp_open function in fs/namei.c in the kernel package before 2...CVE-2013-21884.7 Medium
- redhat enterprise linuxA certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on...CVE-2013-19355.7 Medium
- apache http server, canonical ubuntu linux, opensuse +6 more +8 moremod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is...CVE-2013-1896Fix availableEPSS 29.5%4.3 Medium
- redhat enterprise linuxThe Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows...CVE-2013-20512.6 Low
- redhat enterprise linux, jboss enterprise web server +1 moreThe (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of...CVE-2013-1976Fix available6.9 Medium
- redhat enterprise linuxA certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows...CVE-2013-22246.9 Medium
- mozilla firefox, thunderbird, thunderbird esr +13 more +15 moreMozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and...CVE-2013-1690In KEVPublic exploitEPSS 69.0%8.8 High
- haxx curl, libcurl, canonical ubuntu linux +2 more +4 moreHeap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl...CVE-2013-2174Fix available6.8 Medium
- haproxy, canonical ubuntu linux, debian linux +1 more +3 moreHAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*...CVE-2013-2175Fix available5.0 Medium
- Show moreLoading…