Skip to contentRedhat Linux vulnerabilities
- debian shadow, linux, fedoraproject fedora +4 more +6 moreshadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory treesCVE-2013-4235Fix available4.7 Medium
- linux kernel, opensuse leap, redhat enterprise linux +2 moreIn the Linux kernel 5.0.21, a setxattr operation, after a mount of a crafted ext4 image, can...CVE-2019-19319Fix available6.5 Medium
- dhcpv6 project dhcpv6, linux dhcp6c, redhat enterprise linux +2 moreThe DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP...CVE-2011-27179.8 Critical
- packagekit, debian linux, redhat enterprise linux server +2 morePackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which...CVE-2011-2515Fix available5.3 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreThe Linux kernel through 5.3.13 on powerpc allows Information Exposure because the Spectre-RSB...CVE-2019-18660Fix available4.7 Medium
- dirmngr, debian linux, gnupg +1 more +3 moredirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to...CVE-2011-22075.3 Medium
- accountsservice project accountsservice, debian linux, opensuse +1 more +3 moreAn issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in...CVE-2012-6655Fix available3.3 Low
- ethz xquest, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA password generation weakness exists in xquest through 2016-06-13.CVE-2016-49802.5 Low
- hardlink, debian linux, redhat enterprise linux +2 moreHardlink before 0.1.2 operates on full file system objects path names which can allow a local...CVE-2011-36327.1 High
- hardlink, debian linux, redhat enterprise linux +2 moreHardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows...CVE-2011-36318.8 High
- hardlink, debian linux, redhat enterprise linux +2 moreHardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way...CVE-2011-36308.8 High
- sqlite, canonical ubuntu linux, oracle mysql workbench +5 more +7 moreSQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in...CVE-2019-19242Fix available5.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA vulnerability was found in marvell wifi chip driver in Linux kernel. There is a heap-based...CVE-2019-14896Fix available7.8 High
- libuser, debian linux, fedoraproject fedora +1 more +3 morelibuser has information disclosure when moving user's home directoryCVE-2012-5644Fix available5.5 Medium
- libuser, fedoraproject fedora, redhat enterprise linux +2 morelibuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and...CVE-2012-5630Fix available6.3 Medium
- quagga, debian linux, redhat enterprise linux +2 morequagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removalCVE-2012-55216.5 Medium
- mozilla firefox, firefox esr, thunderbird +12 more +14 moreWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller...CVE-2019-11745Fix available8.8 High
- python pyxml, redhat enterprise linux, enterprise virtualization hypervisor +2 morePyXML: Hash table collisions CPU usage Denial of ServiceCVE-2012-08777.5 High
- red hat redhat-upgrade-tool, redhat enterprise linux +1 moreredhat-upgrade-tool: Does not check GPG signatures when upgrading versionsCVE-2014-3585Fix available9.8 Critical
- libbluray, debian linux, fedoraproject fedora +1 more +3 morelibbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR filesCVE-2015-7810Fix available4.7 Medium
- openstack designate, debian linux, redhat enterprise linux openstack platform +2 moreDesignate does not enforce the DNS protocol limit concerning record set sizesCVE-2015-5694Fix available6.5 Medium
- google chrome, fedoraproject fedora, opensuse backports +3 more +5 moreUse after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker...CVE-2019-13723Fix available8.8 High
- mediawiki, debian linux, fedoraproject fedora +1 more +3 moreMediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which...CVE-2013-1817Fix available7.5 High
- mediawiki, debian linux, fedoraproject fedora +1 more +3 moreMediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of...CVE-2013-1816Fix available7.5 High
- redhat tuned, debian linux, fedoraproject fedora +4 more +6 moretuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill...CVE-2012-6136Fix available5.5 Medium
- openpegasus tog-pegasus, redhat enterprise linux +1 moretog-Pegasus has a package hash collision DoS vulnerabilityCVE-2011-49677.5 High
- linux kernel, opensuse leap, redhat enterprise linux +2 moreA memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp...CVE-2019-19081Fix available5.9 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux +2 moreA memory leak in the nfp_abm_u32_knode_replace() function in drivers/net/ethernet/netronome/nfp...CVE-2019-19076Fix availableDisputed5.9 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c in the...CVE-2019-19072Fix available4.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreA memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu...CVE-2019-19068Fix available4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreA memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux...CVE-2019-19066Fix available4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreA memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel...CVE-2019-19062Fix available4.7 Medium
- oniguruma project oniguruma, debian linux, fedoraproject fedora +1 more +3 moreAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...CVE-2019-19012Public exploitFix availableEPSS 10.6%9.8 Critical
- drupal, debian linux, drupal core +2 more +4 moreAn access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the...CVE-2011-27267.5 High
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle backs up private filesCVE-2012-1156Fix available7.5 High
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle before 2.2.2 has a password and web services issue where when the user profile is updated...CVE-2012-11688.2 High
- moodle, debian linux, fedoraproject fedora +1 more +3 moreMoodle has a database activity export permission issue where the export function of the database...CVE-2012-11557.5 High
- unixodbc, debian linux, opensuse +1 more +3 moreThe SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow...CVE-2011-1145Fix available7.8 High
- consolekit, debian linux, redhat enterprise linux +2 moreIn ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw...CVE-2010-46648.8 High
- debian linux, storaged-project udisks, fedoraproject fedora +2 more +4 moreudisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.CVE-2010-46617.8 High
- php, php5, debian linux +1 more +3 morePHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which...CVE-2010-46577.5 High
- gdk-pixbuf, debian linux, redhat enterprise linux +2 moregdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables...CVE-2011-28979.8 Critical
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +3 more +5 moreA flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before...CVE-2019-14818Fix available7.5 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +157 more +159 moreTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an...CVE-2019-11135Fix available6.5 Medium
- intel graphics driver, canonical ubuntu linux, intel atom x5-e3930 firmware +354 more +356 moreInsufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and...CVE-2019-0155Fix available7.8 High
- canonical ubuntu linux, debian linux, f5 big-ip access policy manager +775 more +777 moreImproper invalidation for page table updates by a virtual guest operating system for multiple...CVE-2018-12207Fix available6.5 Medium
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +1 more +3 moreA flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission...CVE-2019-14824Fix available6.5 Medium
- apple icloud, icloud for windows, ios +10 more +12 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-8814Fix available8.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux...CVE-2019-18811Fix available5.5 Medium
- linux kernel, broadcom fabric operating system, netapp active iq unified manager +14 more +16 moreAn issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is...CVE-2019-18805Fix available9.8 Critical
- Show moreLoading…