Skip to contentRedhat Linux Server vulnerabilities
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...CVE-2017-5376Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...CVE-2017-5375Public exploitFix availableEPSS 34.1%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...CVE-2017-5373Fix available9.8 Critical
- apache groovy, redhat enterprise linux server +1 moreDeserialization of Untrusted Data in GroovyCVE-2016-6814Fix availableEPSS 17.2%9.8 Critical
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling...CVE-2017-3318Fix available4.0 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported...CVE-2017-3317Fix available4.0 Medium
- oracle mysql, mysql server, canonical ubuntu linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM)....CVE-2017-3313Fix available4.7 Medium
- oracle mysql, debian linux, mariadb +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)....CVE-2017-3291Fix available6.3 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)....CVE-2017-3265Fix available5.6 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2017-3258Fix available6.5 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2017-3244Fix available6.5 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets)....CVE-2017-3243Fix available4.4 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-3238Fix available6.5 Medium
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreInteger overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in...CVE-2017-5333Fix available7.8 High
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreThe extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access...CVE-2017-5332Fix available7.8 High
- isc bind, debian linux, netapp data ontap edge +9 more +11 morenamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...CVE-2016-9131Fix availableEPSS 40.6%7.5 High
- icoutils project icoutils, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to...CVE-2017-5208Fix available8.8 High
- gnu bash, debian linux, redhat enterprise linux desktop +5 more +7 morepopd in bash might allow local users to bypass the restricted shell and cause a use-after-free...CVE-2016-9401Fix available5.5 Medium
- qemu, citrix xenserver, debian linux +7 more +9 moreA heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display...CVE-2016-9603Fix available5.5 Medium
- red hat spice, debian linux, redhat enterprise linux desktop +4 more +6 moreA vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An...CVE-2016-9577Fix available7.5 High
- the openjpeg project openjpeg, debian linux, redhat enterprise linux desktop +4 more +6 moreAn out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool....CVE-2016-9573Fix available6.5 Medium
- redhat enterprise linux, enterprise linux desktop, enterprise linux hpc node +2 more +4 moresudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and...CVE-2016-7091Fix available4.4 Medium
- apache http server, debian linux, netapp clustered data ontap +8 more +10 moreApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...CVE-2016-8743Fix availableEPSS 13.3%7.5 High
- zlib, apple iphone os, mac os x +21 more +23 moreThe crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have...CVE-2016-9843Fix available9.8 Critical
- zlib, apple iphone os, mac os x +17 more +19 moreThe inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to...CVE-2016-9842Fix available8.8 High
- zlib, apple iphone os, mac os x +37 more +39 moreinffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9841Fix available9.8 Critical
- zlib, apple iphone os, mac os x +18 more +20 moreinftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9840Fix available8.8 High
- [unknown] samba, redhat enterprise linux desktop, enterprise linux server +5 more +7 moreIt was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets...CVE-2016-2125Fix available6.4 Medium
- jasper project jasper, debian linux, redhat enterprise linux desktop +3 more +5 moreJasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG...CVE-2016-9591Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...CVE-2016-9905Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...CVE-2016-9904Fix available7.5 High
- mozilla firefox, firefox esr, redhat enterprise linux desktop +4 more +6 moreThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...CVE-2016-9902Fix available7.5 High
- mozilla firefox, firefox esr, redhat enterprise linux aus +4 more +6 moreHTML tags received from the Pocket server will be processed without sanitization and any...CVE-2016-9901Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreExternal resources that should be blocked when loaded by SVG images can bypass security...CVE-2016-9900Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free while manipulating DOM events and removing audio elements due to errors in the...CVE-2016-9899Public exploitFix availableEPSS 19.4%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...CVE-2016-9898Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...CVE-2016-9897Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...CVE-2016-9895Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...CVE-2016-9893Fix available9.8 Critical
- ceph, redhat ceph storage, ceph storage mon +4 more +6 moreA flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the...CVE-2016-9579Fix available6.5 Medium
- jasper project jasper, debian linux, redhat enterprise linux desktop +5 more +7 moreStack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1...CVE-2016-9560Fix available7.8 High
- ntp, canonical ubuntu linux, hpe hpux-ntp +6 more +8 moreNTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting...CVE-2016-7426Fix availableEPSS 12.4%7.5 High
- gstreamer, debian linux, fedoraproject fedora +6 more +8 moreThe windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE...CVE-2016-9811Fix available4.7 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA missing check for whether a property of a JS object is private in V8 in Google Chrome prior to...CVE-2016-9651Public exploitFix availableEPSS 11.2%8.8 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...CVE-2016-9079In KEVPublic exploitFix availableEPSS 87.4%7.5 High
- jasper project jasper, debian linux, redhat enterprise linux desktop +4 more +6 moreA heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being...CVE-2016-8654Fix available7.8 High
- gstreamer, debian linux, redhat enterprise linux desktop +3 more +5 moreHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...CVE-2016-9636Fix available9.8 Critical
- gstreamer, debian linux, redhat enterprise linux desktop +3 more +5 moreHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...CVE-2016-9635Fix available9.8 Critical
- gstreamer, debian linux, redhat enterprise linux desktop +3 more +5 moreHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...CVE-2016-9634Fix available9.8 Critical
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 moreSerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux...CVE-2016-7050Fix available9.8 Critical
- Show moreLoading…