Known vulnerabilities in Red Hat Enterprise Linux 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2023-4535	Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys	4.5 Medium	Nov 6, 2023
CVE-2023-5090	Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs	6.0 Medium	Nov 6, 2023
CVE-2023-42669	Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc	6.5 Medium	Nov 6, 2023
CVE-2023-5088	Qemu: improper ide controller reset can lead to mbr overwrite	6.4 Medium	Nov 3, 2023
CVE-2023-3961	Samba: smbd allows client access to unix domain sockets on the file system as root	9.1 Critical	Nov 3, 2023
CVE-2023-1476	A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code	7.0 High	Nov 3, 2023
CVE-2023-46847	Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to…	8.6 High	Nov 3, 2023
CVE-2023-46848	Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP…	8.6 High	Nov 3, 2023
CVE-2023-42670	Samba: ad dc busy rpc multiple listener dos	6.5 Medium	Nov 3, 2023
CVE-2023-5824	Squid: dos against http and https	7.5 High	Nov 3, 2023
CVE-2023-4091	Samba: smb clients can truncate files with read-only permissions	6.5 Medium	Nov 3, 2023
CVE-2023-1194	An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel…	7.1 High	Nov 3, 2023
CVE-2023-46846	SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform…	9.3 Critical	Nov 3, 2023
CVE-2022-4900	A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to…	6.2 Medium	Nov 2, 2023
CVE-2023-38473	A vulnerability was found in Avahi	6.2 Medium	Nov 2, 2023
CVE-2023-38472	A vulnerability was found in Avahi	6.2 Medium	Nov 2, 2023
CVE-2023-38471	A vulnerability was found in Avahi	6.2 Medium	Nov 2, 2023
CVE-2023-38470	A vulnerability was found in Avahi	6.2 Medium	Nov 2, 2023
CVE-2023-38469	A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record	6.2 Medium	Nov 2, 2023
CVE-2023-3164	A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and…	5.5 Medium	Nov 2, 2023
CVE-2023-1193	A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS…	6.5 Medium	Nov 1, 2023
CVE-2023-3397	Kernel: slab-use-after-free write in txend due to race condition	7.0 High	Nov 1, 2023
CVE-2023-1192	A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel	6.5 Medium	Nov 1, 2023
CVE-2023-5178	Kernel: use after free in nvmet_tcp_free_crypto in nvme	8.8 High	Nov 1, 2023
CVE-2023-3972	Insights-client: unsafe handling of temporary files and directories	7.8 High	Nov 1, 2023

Other Red Hat products