Skip to contentRedhat Linux vulnerabilities
- canonical ubuntu linux, debian linux, libjpeg-turbo +1 more +3 moreThe cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer...CVE-2016-3616Fix available8.8 High
- gstreamer, debian linux, redhat enterprise linux desktop +5 more +7 moreThe gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in...CVE-2017-5848Fix available7.5 High
- mariadb, oracle mysql, debian linux +6 more +8 moreCrash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB...CVE-2017-3302Fix available7.5 High
- isc bind, bind 9, debian linux +8 more +10 moreCombination of DNS64 and RPZ Can Lead to CrashCVE-2017-3135Fix availableEPSS 17.1%7.5 High
- debian linux, linux kernel, redhat enterprise linux +5 more +7 moreA flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr...CVE-2017-2618Fix available5.5 Medium
- red hat spice, debian linux, redhat enterprise linux desktop +4 more +6 moreA vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An...CVE-2016-9578Fix available7.5 High
- php-gettext project php-gettext, fedoraproject fedora, opensuse leap +1 more +3 moreThe plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote...CVE-2015-8980Fix available9.8 Critical
- qemu, citrix xenserver, debian linux +8 more +10 moreQuick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an...CVE-2017-2615Fix available5.5 Medium
- fedoraproject 389 directory server, unspecified 389-ds-base, redhat enterprise linux +2 more389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the...CVE-2017-2591Fix available3.7 Low
- tcpdump, debian linux, redhat enterprise linux desktop +5 more +7 moreThe ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().CVE-2017-5205Fix available9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +5 more +7 moreThe IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().CVE-2017-5204Fix available9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +5 more +7 moreThe BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().CVE-2017-5203Fix available9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +5 more +7 moreThe ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().CVE-2017-5202Fix available9.8 Critical
- libical project libical, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 morelibical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted...CVE-2016-5824Fix available5.5 Medium
- canonical ubuntu linux, debian linux, littlecms little cms color engine +16 more +18 moreThe Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to...CVE-2016-10165Fix available7.1 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in the Media Decoder when working with media files when some...CVE-2017-5396Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...CVE-2017-5390Fix available9.8 Critical
- mozilla firefox, firefox esr, debian linux +6 more +8 moreWebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions...CVE-2017-5386Fix available7.3 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...CVE-2017-5383Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...CVE-2017-5380Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...CVE-2017-5378Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...CVE-2017-5376Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...CVE-2017-5375Public exploitFix availableEPSS 34.1%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...CVE-2017-5373Fix available9.8 Critical
- apache groovy, redhat enterprise linux server +1 moreDeserialization of Untrusted Data in GroovyCVE-2016-6814Fix availableEPSS 17.2%9.8 Critical
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling...CVE-2017-3318Fix available4.0 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported...CVE-2017-3317Fix available4.0 Medium
- oracle mysql, mysql server, canonical ubuntu linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM)....CVE-2017-3313Fix available4.7 Medium
- oracle mysql, debian linux, mariadb +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)....CVE-2017-3291Fix available6.3 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)....CVE-2017-3265Fix available5.6 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2017-3258Fix available6.5 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2017-3244Fix available6.5 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets)....CVE-2017-3243Fix available4.4 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-3238Fix available6.5 Medium
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreInteger overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in...CVE-2017-5333Fix available7.8 High
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreThe extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access...CVE-2017-5332Fix available7.8 High
- isc bind, debian linux, netapp data ontap edge +9 more +11 morenamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...CVE-2016-9131Fix availableEPSS 40.6%7.5 High
- icoutils project icoutils, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to...CVE-2017-5208Fix available8.8 High
- gnu bash, debian linux, redhat enterprise linux desktop +5 more +7 morepopd in bash might allow local users to bypass the restricted shell and cause a use-after-free...CVE-2016-9401Fix available5.5 Medium
- qemu, citrix xenserver, debian linux +7 more +9 moreA heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display...CVE-2016-9603Fix available5.5 Medium
- red hat spice, debian linux, redhat enterprise linux desktop +4 more +6 moreA vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An...CVE-2016-9577Fix available7.5 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...CVE-2016-7056Fix available5.5 Medium
- the openjpeg project openjpeg, debian linux, redhat enterprise linux desktop +4 more +6 moreAn out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool....CVE-2016-9573Fix available6.5 Medium
- uclouvain openjpeg, redhat enterprise linux, enterprise linux for ibm z systems +2 more +4 moreopenjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted...CVE-2016-96757.8 High
- redhat enterprise linux, enterprise linux desktop, enterprise linux hpc node +2 more +4 moresudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and...CVE-2016-7091Fix available4.4 Medium
- apache http server, debian linux, netapp clustered data ontap +8 more +10 moreApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...CVE-2016-8743Fix availableEPSS 13.3%7.5 High
- zlib, apple iphone os, mac os x +21 more +23 moreThe crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have...CVE-2016-9843Fix available9.8 Critical
- zlib, apple iphone os, mac os x +17 more +19 moreThe inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to...CVE-2016-9842Fix available8.8 High
- zlib, apple iphone os, mac os x +37 more +39 moreinffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9841Fix available9.8 Critical
- zlib, apple iphone os, mac os x +18 more +20 moreinftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9840Fix available8.8 High
- Show moreLoading…