Skip to contentRedhat Linux vulnerabilities
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreImplementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an...CVE-2019-5754Fix available6.5 Medium
- advancemame advancecomp, debian linux, fedoraproject fedora +3 more +5 moreAn issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the...CVE-2019-8383Fix available7.8 High
- advancemame advancecomp, debian linux, fedoraproject fedora +3 more +5 moreAn issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the...CVE-2019-8379Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreIn the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles...CVE-2019-6974Public exploitFix availableEPSS 16.5%8.1 High
- flatpak, debian linux, redhat enterprise linux desktop +5 more +7 moreFlatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script...CVE-2019-8308Fix available8.2 High
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on...CVE-2018-125499.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native...CVE-2018-125479.8 Critical
- docker, linuxfoundation runc, apache mesos +15 more +17 morerunc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to...CVE-2019-5736Public exploitFix availableEPSS 98.5%8.6 High
- elfutils project elfutils, redhat enterprise linux, enterprise linux desktop +5 more +7 moreIn elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h...CVE-2019-7664Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +8 more +10 moreIn elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in...CVE-2019-7665Fix available5.5 Medium
- sqlalchemy, debian linux, opensuse backports sle +6 more +8 moreSQLAlchemy is vulnerable to SQL Injection via group_by parameterCVE-2019-7548Fix available7.8 High
- the gnome projectr gdm, canonical ubuntu linux, gnome display manager +1 more +3 moreA vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration...CVE-2019-3825Fix available6.3 Medium
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....CVE-2019-3822Fix availableEPSS 12.9%7.1 High
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....CVE-2018-16890Public exploitFix available5.4 Medium
- libpng, canonical ubuntu linux, debian linux +29 more +31 morepng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...CVE-2019-7317Fix available5.3 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0...CVE-2019-1000020Fix available6.5 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2...CVE-2019-1000019Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef:...CVE-2019-7310Fix available7.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +9 more +11 moreWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...CVE-2018-18506Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...CVE-2018-18505Fix available10.0 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMozilla developers and community members reported memory safety bugs present in Firefox 64 and...CVE-2018-18501Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...CVE-2018-18500Public exploitFix availableEPSS 12.7%9.8 Critical
- red hat, inc. spice, canonical ubuntu linux, debian linux +6 more +8 moreSpice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by...CVE-2019-3813Fix available7.5 High
- debian linux, systemd, redhat enterprise linux desktop +5 more +7 moreA memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise...CVE-2019-3815Fix available3.3 Low
- elfutils project elfutils, canonical ubuntu linux, debian linux +8 more +10 moreAn issue was discovered in elfutils 0.175. A segmentation fault can occur in the function...CVE-2019-7150Fix available5.5 Medium
- rsyslog, debian linux, redhat enterprise linux desktop +10 more +12 moreA denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could...CVE-2018-16881Fix available5.3 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 moreIn Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system...CVE-2019-6116Public exploitFix availableEPSS 41.6%7.8 High
- python, debian linux, opensuse leap +4 more +6 moreAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...CVE-2019-5010Public exploitFix availableEPSS 20.7%5.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection)....CVE-2019-25394.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)....CVE-2019-25365.0 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options)....CVE-2019-25354.1 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security :...CVE-2019-25336.5 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-25304.9 Medium
- oracle corporation java, netapp oncommand unified manager, oncommand workflow automation +9 more +11 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The...CVE-2019-24493.1 Low
- oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-24365.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +10 more +12 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2019-2537Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-2534Fix available7.1 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-2532Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-2531Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2529Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2019-2510Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2481Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +11 more +13 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2019-2455Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2019-2434Fix available6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +16 more +18 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported...CVE-2019-2422Fix available3.1 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2420Fix available4.9 Medium
- fedoraproject sssd, debian linux, fedoraproject fedora +2 more +4 moreA vulnerability was found in sssd. If a user was configured with no home directory set, sssd...CVE-2019-3811Fix available4.1 Medium
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreIt was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial...CVE-2018-16846Fix available6.5 Medium
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreIt was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions...CVE-2018-14662Fix available3.5 Low
- systemd, canonical ubuntu linux, netapp active iq performance analytics services +2 more +4 moreIt was discovered systemd does not correctly check the content of PIDFile files before using it...CVE-2018-16888Fix available4.4 Medium
- Show moreLoading…