Skip to contentRedhat Linux Desktop vulnerabilities
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2017-3456Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-3453Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-3309Fix available7.7 High
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2017-3308Fix available7.7 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreHeap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and...CVE-2017-7980Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreFixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex....CVE-2017-5469Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA potential memory corruption and crash when using Skia content when drawing content outside of...CVE-2017-5467Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreIf a page is loaded from an original site through a hyperlink and contains a redirect to a "data...CVE-2017-5466Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash...CVE-2017-5465Public exploitFix availableEPSS 18.2%9.1 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreDuring DOM manipulations of the accessibility tree through script, the DOM tree can become out of...CVE-2017-5464Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in frame selection triggered by a combination of malicious script...CVE-2017-5460Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable...CVE-2017-5459Fix available9.8 Critical
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreA mechanism to bypass file system access protections in the sandbox using the file system request...CVE-2017-5456Fix available9.8 Critical
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreThe internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and...CVE-2017-5455Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA mechanism to bypass file system access protections in the sandbox to use the file picker to...CVE-2017-5454Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA mechanism to spoof the addressbar through the user interaction on the addressbar and the ...CVE-2017-5451Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA possibly exploitable crash triggered during layout and manipulation of bidirectional unicode...CVE-2017-5449Fix available7.5 High
- mozilla firefox, firefox esr, debian linux +6 more +8 moreAn out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media...CVE-2017-5448Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read during the processing of glyph widths during text layout. This results in a...CVE-2017-5447Public exploitFix availableEPSS 17.0%9.1 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect...CVE-2017-5446Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA vulnerability while parsing "application/http-index-format" format content where uninitialized...CVE-2017-5445Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow vulnerability while parsing "application/http-index-format" format content when...CVE-2017-5444Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds write vulnerability while decoding improperly formed BinHex format archives....CVE-2017-5443Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during changes in style when manipulating DOM elements. This...CVE-2017-5442Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability when holding a selection during scroll events. This results in a...CVE-2017-5441Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to a failure to propagate error...CVE-2017-5440Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to poor handling of template parameters...CVE-2017-5439Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to the result handler being held by a...CVE-2017-5438Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite...CVE-2017-5436Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability occurs during transaction processing in the editor during design...CVE-2017-5435Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreA use-after-free vulnerability occurs when redirecting focus handling which results in a...CVE-2017-5434Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in SMIL animation functions occurs when pointers to animation...CVE-2017-5433Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability occurs during certain text input selection resulting in a...CVE-2017-5432Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMemory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these...CVE-2017-5430Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...CVE-2017-5429Fix available9.8 Critical
- firewalld, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 morefirewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify...CVE-2016-5410Fix available5.5 Medium
- apache log4j, netapp oncommand api services, oncommand insight +76 more +78 moreDeserialization of Untrusted Data in Log4jCVE-2017-5645Public exploitFix availableEPSS 89.4%9.8 Critical
- redhat subscription-manager, enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses...CVE-2016-4455Fix available3.3 Low
- isc bind, bind 9, debian linux +9 more +11 moreA response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAMECVE-2017-3137Fix available7.5 High
- isc bind, bind 9, debian linux +9 more +11 moreAn error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"CVE-2017-3136Fix availableEPSS 11.1%5.9 Medium
- setroubleshoot project setroubleshoot, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moresetroubleshoot allows local users to bypass an intended container protection mechanism and...CVE-2016-49897.0 High
- setroubleshoot project setroubleshoot, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by...CVE-2016-44467.0 High
- setroubleshoot project setroubleshoot, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to...CVE-2016-4445Fix available7.0 High
- setroubleshoot project setroubleshoot, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary...CVE-2016-44447.0 High
- jasper, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreJasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded...CVE-2016-9600Fix available6.5 Medium
- jasper project jasper, oracle outside in technology, redhat enterprise linux desktop +5 more +7 moreAn out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper...CVE-2016-95835.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac,...CVE-2017-5056Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac,...CVE-2017-5054Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac,...CVE-2017-5053Fix available9.6 Critical
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133...CVE-2017-5052Fix available8.8 High
- Show moreLoading…