Known vulnerabilities in Red Hat Enterprise Linux 8.6 Extended Update Support

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2023-4911	Exploited Glibc: buffer overflow in ld.so leading to privilege escalation	7.8 High	Oct 3, 2023
CVE-2023-4732	Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h	4.7 Medium	Oct 3, 2023
CVE-2023-5157	Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6	7.5 High	Sep 26, 2023
CVE-2023-42753	Kernel: netfilter: potential slab-out-of-bound access due to integer underflow	7.0 High	Sep 25, 2023
CVE-2023-4806	Glibc: potential use-after-free in getaddrinfo()	5.9 Medium	Sep 18, 2023
CVE-2023-4813	Glibc: potential use-after-free in gaih_inet()	5.9 Medium	Sep 12, 2023
CVE-2023-3899	Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration	7.8 High	Aug 23, 2023
CVE-2023-4459	Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()	5.5 Medium	Aug 21, 2023
CVE-2023-39417	Postgresql: extension script @substitutions@ within quoting allow sql injection	7.5 High	Aug 11, 2023
CVE-2023-4132	Kernel: smsusb: use-after-free caused by do_submit_urb()	5.5 Medium	Aug 3, 2023
CVE-2023-4004	Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()	7.8 High	Jul 31, 2023
CVE-2023-3772	Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()	5.5 Medium	Jul 25, 2023
CVE-2023-3812	Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags	7.8 High	Jul 24, 2023
CVE-2023-3567	Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race	7.1 High	Jul 24, 2023
CVE-2023-3019	Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()	6.0 Medium	Jul 24, 2023
CVE-2023-34968	Samba: spotlight server-side share path disclosure	5.3 Medium	Jul 20, 2023
CVE-2023-34967	Samba: type confusion in mdssvc rpc service for spotlight	5.3 Medium	Jul 20, 2023
CVE-2023-34966	Samba: infinite loop in mdssvc rpc service for spotlight	7.5 High	Jul 20, 2023
CVE-2022-2127	Samba: out-of-bounds read in winbind auth_crap	5.9 Medium	Jul 20, 2023
CVE-2023-1989	A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel	7.0 High	Apr 11, 2023

Other Red Hat products