Skip to contentRedhat Linux vulnerabilities
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and...CVE-2016-5612Fix available6.5 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and...CVE-2016-3492Fix available6.5 Medium
- gnome shotwell, redhat enterprise linux +1 moreShotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification...CVE-2016-1000033Fix available3.7 Low
- openssl, debian linux, fujitsu m10-1 firmware +42 more +44 moreA denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in...CVE-2016-8610Public exploitFix availableEPSS 39.9%7.5 High
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 more389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...CVE-2016-4992Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreRace condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to...CVE-2016-5195In KEVPublic exploitFix availableEPSS 83.5%7.0 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X...CVE-2016-4286Fix available8.8 High
- systemd project systemd, novell suse linux enterprise desktop, suse linux enterprise server +6 more +8 moreThe manager_dispatch_notify_fd function in systemd allows local users to cause a denial of...CVE-2016-7796Fix available5.5 Medium
- linux kernel, redhat enterprise mrg, linux +2 moreThe Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when...CVE-2016-36997.4 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreMultiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers...CVE-2016-5178Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers...CVE-2016-5177Fix available8.8 High
- selinux project selinux, fedoraproject fedora, redhat enterprise linux desktop +4 more +6 moreSELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox...CVE-2016-7545Fix available8.8 High
- libarchive, oracle linux, redhat enterprise linux desktop +7 more +9 moreThe sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non...CVE-2016-5418Fix available7.5 High
- mariadb, oracle mysql, percona server +9 more +11 moreOracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5...CVE-2016-6662Public exploitFix availableEPSS 67.7%9.8 Critical
- uclouvain openjpeg, debian linux, fedoraproject fedora +6 more +8 moreInteger overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers...CVE-2016-7163Fix available7.8 High
- libarchive, oracle linux, redhat enterprise linux desktop +6 more +8 morelibarchive before 3.2.0 does not limit the number of recursive decompressions, which allows...CVE-2016-7166Fix available5.5 Medium
- cisco content security management appliance, nodejs node.js, openssl +6 more +8 moreThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...CVE-2016-2183Public exploitFix availableEPSS 94.7%7.5 High
- nettle project nettle, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys...CVE-2016-6489Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to...CVE-2016-5403Fix available5.5 Medium
- google chrome, xmlsoft libxml2, apple iphone os +14 more +16 moreUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...CVE-2016-5131Fix available8.8 High
- oracle linux, redhat enterprise linux server, enterprise linux workstation +2 moreStack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package...CVE-2016-5408Fix available9.8 Critical
- mariadb, oracle mysql, ibm powerkvm +8 more +10 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-5444Fix available3.7 Low
- oracle mysql, mariadb, redhat enterprise linux +2 moreUnspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local...CVE-2016-3471Fix available7.5 High
- mariadb, oracle mysql, ibm powerkvm +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and...CVE-2016-3452Fix available3.7 Low
- mariadb, oracle mysql, canonical ubuntu linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and...CVE-2016-5440Fix available4.9 Medium
- isc bind, fedoraproject fedora, hp hp-ux +6 more +8 moreISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or...CVE-2016-2775Fix availableEPSS 63.3%5.9 Medium
- apache tomcat, hp system management homepage, oracle linux +8 more +10 moreImproper Access Control in Apache TomcatCVE-2016-5388Fix availableEPSS 50.9%8.1 High
- apache http server, canonical ubuntu linux, debian linux +16 more +18 moreThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-5387Fix availableEPSS 55.7%8.1 High
- golang go, fedoraproject fedora, oracle linux +3 more +5 moreThe net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18...CVE-2016-5386Fix available8.1 High
- php, debian linux, drupal +9 more +11 moreHTTP Proxy header vulnerabilityCVE-2016-5385Fix availableEPSS 50.4%8.1 High
- kernel util-linux, ibm power hardware management console, powerkvm +6 more +8 moreThe parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows...CVE-2016-5011Fix available4.6 Medium
- redhat ceph, ceph storage mon, ceph storage osd +4 more +6 moreThe handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause...CVE-2016-5009Fix available6.5 Medium
- isc bind, redhat enterprise linux +1 moreISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary...CVE-2016-6170Fix availableEPSS 40.9%6.5 Medium
- linux kernel-rt, redhat enterprise linux for real time, novell suse linux enterprise real time extension +1 more +3 moreThe icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the...CVE-2016-3707Fix available8.1 High
- linux kernel, oracle linux, novell suse linux enterprise real time extension +11 more +13 moreThe key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does...CVE-2016-4470Fix available5.5 Medium
- libarchive, oracle linux, solaris +7 more +9 moreInteger overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a...CVE-2016-5844Fix available6.5 Medium
- libgd, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd)...CVE-2016-5766Fix available8.8 High
- libarchive, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreHeap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in...CVE-2016-4302Fix available7.8 High
- libarchive, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreInteger overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in...CVE-2016-4300Fix available7.8 High
- libarchive, oracle linux, redhat enterprise linux desktop +6 more +8 moreThe archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in...CVE-2016-4809Fix available7.5 High
- google chrome, canonical ubuntu linux, novell suse package hub for suse linux enterprise +5 more +7 moreMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to...CVE-2016-1704Fix available8.8 High
- adobe flash player, opensuse, redhat enterprise linux desktop +4 more +6 moreUnspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to...CVE-2016-4171In KEVFix availableEPSS 20.2%9.8 Critical
- adobe flash player, flash player desktop runtime, opensuse +5 more +7 moreUnspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe...CVE-2016-41568.8 High
- adobe flash player, flash player desktop runtime, opensuse +5 more +7 moreUnspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe...CVE-2016-41558.8 High
- adobe flash player, flash player desktop runtime, opensuse +5 more +7 moreUnspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe...CVE-2016-41548.8 High
- adobe flash player, flash player desktop runtime, opensuse +5 more +7 moreUnspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe...CVE-2016-41538.8 High
- adobe flash player, flash player desktop runtime, opensuse +5 more +7 moreUnspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe...CVE-2016-41528.8 High
- adobe flash player, flash player desktop runtime, opensuse +5 more +7 moreUnspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe...CVE-2016-41518.8 High
- adobe flash player, flash player desktop runtime, opensuse +5 more +7 moreUnspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe...CVE-2016-41508.8 High
- adobe flash player, flash player desktop runtime, opensuse +5 more +7 moreUnspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe...CVE-2016-41498.8 High
- Show moreLoading…