Skip to contentRedhat Linux vulnerabilities
- gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: out-of-bounds read at fs/ntfs.cCVE-2023-4693Fix available5.3 Medium
- gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code executionCVE-2023-4692Fix available7.5 High
- libxpm project libxpm, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibxpm: out of bounds read on xpm with corrupted colormapCVE-2023-43789Fix available5.5 Medium
- x.org libxpm, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibxpm: out of bounds read in xpmcreatexpmimagefrombuffer()CVE-2023-43788Fix available5.5 Medium
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: integer overflow in xcreateimage() leading to a heap overflowCVE-2023-43787Fix available7.8 High
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: stack exhaustion from infinite recursion in putsubimage()CVE-2023-43786Public exploitFix available5.5 Medium
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: out-of-bounds memory access in _xkbreadkeysyms()CVE-2023-43785Fix available6.5 Medium
- webmproject libvpx, debian linux, fedoraproject fedora +1 more +3 moreVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.CVE-2023-44488Fix available7.5 High
- google chrome, libvpx, apple ipados +9 more +11 moreElectron affected by libvpx's heap buffer overflow in vp8 encodingCVE-2023-5217In KEVPublic exploitFix availableEPSS 49.0%8.8 High
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swapCVE-2023-42756Fix available4.4 Medium
- redhat libnbd, red hat enterprise linux 8, enterprise linux 8 advanced virtualization +2 more +4 moreLibnbd: crash or misbehaviour when nbd server returns an unexpected block sizeCVE-2023-5215Fix available5.3 Medium
- redhat undertow, red hat build of quarkus, data grid 8 +25 more +27 moreUndertow: outofmemoryerror due to @multipartconfig handlingCVE-2023-3223Fix available7.5 High
- debian linux, linux kernel, red hat enterprise linux 6 +17 more +19 moreKernel: netfilter: potential slab-out-of-bound access due to integer underflowCVE-2023-42753Fix available7.0 High
- gnu glibc, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGlibc: dos due to memory leak in getaddrinfo.cCVE-2023-5156Fix available7.5 High
- redhat single sign-on, red hat single sign-on 7, rhel-8 based middleware containers +4 more +6 moreRhsso-container-image: unsecured management interface exposed to adjecent networkCVE-2022-40398.0 High
- mariadb, fedoraproject fedora, red hat enterprise linux 7 +18 more +20 moreMariadb: node crashes with transport endpoint is not connected mysqld got signal 6CVE-2023-5157Fix available7.5 High
- gnu glibc, fedoraproject fedora, red hat enterprise linux 6 +28 more +30 moreGlibc: potential use-after-free in getaddrinfo()CVE-2023-4806Fix available5.9 Medium
- gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 moreGlibc: stack read overflow in getaddrinfo in no-aaaa modeCVE-2023-4527Fix available6.5 Medium
- qemu, red hat enterprise linux 9, redhat enterprise linux +7 more +9 moreDma reentrancy issue (incomplete fix for cve-2021-3750)CVE-2023-2680Fix available7.5 High
- shadow-maint shadow-utils, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreShadow-utils: possible password leak during passwd(1) changeCVE-2023-4641Fix available4.7 Medium
- gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 moreGlibc: potential use-after-free in gaih_inet()CVE-2023-4813Public exploitFix available5.9 Medium
- debian linux, linux kernel, fedora +5 more +7 moreKernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.cCVE-2023-4569Fix available5.5 Medium
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: challenge-response protocol bypass during agent registrationCVE-2023-38201Fix available6.5 Medium
- artifex ghostscript, red hat enterprise linux 8, redhat enterprise linux +10 more +12 moreGhostscript: incomplete fix for cve-2020-16305CVE-2023-40425.5 Medium
- redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 moreSubscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configurationCVE-2023-3899Fix available7.8 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +12 more +14 moreKernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()CVE-2023-4459Fix available5.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()CVE-2023-4387Fix available7.1 High
- postgresql, debian linux, red hat enterprise linux 6 +7 more +9 morePostgresql: merge fails to enforce update or select row security policiesCVE-2023-39418Fix available3.1 Low
- postgresql, debian linux, red hat advanced cluster security 4.2 +19 more +21 morePostgresql: extension script @substitutions@ within quoting allow sql injectionCVE-2023-39417Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: exfat: stack overflow in exfat_get_uniname_from_ext_entryCVE-2023-4273Fix available6.0 Medium
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreSev-es / sev-snp vmgexit double fetch vulnerabilityCVE-2023-4155Fix available5.3 Medium
- gnu gawk, fedora, red hat enterprise linux 6 +4 more +6 moreHeap out of bound read in builtin.cCVE-2023-4156Fix available4.4 Medium
- debian linux, intel celeron 5205u firmware, celeron 5305u firmware +531 more +533 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-40982Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuidCVE-2023-4194Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-freeCVE-2023-4147Public exploitFix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreKernel: smsusb: use-after-free caused by do_submit_urb()CVE-2023-4132Fix available5.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreKernel: cxgb4: use-after-free in ch_flower_stats_cb()CVE-2023-4133Fix available5.5 Medium
- artifex ghostscript, debian linux, fedoraproject fedora +5 more +7 moreGhostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dosCVE-2023-38559Fix available5.5 Medium
- qemu, fedora extra packages for enterprise linux, fedora +7 more +9 moreTriggerable assertion due to race condition in hot-unplugCVE-2023-3301Fix available5.6 Medium
- qemu, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreQemu: vnc: infinite loop in inflate_buffer() leads to denial of serviceCVE-2023-3255Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +19 more +21 moreKernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()CVE-2023-4004Fix available7.8 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: potential integer overflow in raw2tiff.cCVE-2023-41175Fix available6.5 Medium
- libtiff, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreLibtiff: integer overflow in tiffcp.cCVE-2023-40745Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattrCVE-2023-3773Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreKernel: xfrm: null pointer dereference in xfrm_update_ae_params()CVE-2023-3772Fix available5.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user sp…CVE-2023-3640Public exploitFix available7.0 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreKernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_fragsCVE-2023-3812Fix available7.8 High
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: registrar is subject to a dos against ssl connectionsCVE-2023-38200Fix available7.5 High
- linux kernel, canonical ubuntu linux, red hat enterprise linux 6 +9 more +11 moreKernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to raceCVE-2023-3567Fix available7.1 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +17 more +19 moreQemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()CVE-2023-3019Fix available6.0 Medium
- Show moreLoading…