Known vulnerabilities in Red Hat Enterprise Linux 9.2 Extended Update Support

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2023-40548	A buffer overflow was found in Shim in the 32-bit system	7.4 High	Jan 29, 2024
CVE-2023-40547	A remote code execution vulnerability was found in Shim	8.3 High	Jan 25, 2024
CVE-2023-6816	Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer	9.8 Critical	Jan 18, 2024
CVE-2024-0646	Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination	7.0 High	Jan 17, 2024
CVE-2024-0567	Gnutls: rejects certificate chain with distributed trust	7.5 High	Jan 16, 2024
CVE-2024-0553	Gnutls: incomplete fix for cve-2023-5981	7.5 High	Jan 16, 2024
CVE-2024-0565	Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client	6.8 Medium	Jan 15, 2024
CVE-2023-4001	Grub2: bypass the grub password protection feature	6.8 Medium	Jan 15, 2024
CVE-2024-0443	Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.	5.5 Medium	Jan 11, 2024
CVE-2023-5455	Ipa: invalid csrf protection	6.5 Medium	Jan 10, 2024
CVE-2023-7192	Kernel: refcount leak in ctnetlink_create_conntrack()	5.5 Medium	Jan 2, 2024
CVE-2024-0193	Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation	7.8 High	Jan 2, 2024
CVE-2023-6546	Kernel: gsm multiplexing race condition leads to privilege escalation	7.0 High	Dec 21, 2023
CVE-2023-6478	Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty	7.6 High	Dec 13, 2023
CVE-2023-6377	Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions	7.8 High	Dec 13, 2023
CVE-2023-6679	Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c	5.5 Medium	Dec 11, 2023
CVE-2023-5870	Postgresql: role pg_signal_backend can signal certain superuser processes.	2.2 Low	Dec 10, 2023
CVE-2023-5868	Postgresql: memory disclosure in aggregate function calls	4.3 Medium	Dec 10, 2023
CVE-2023-5869	Postgresql: buffer overrun from integer overflow in array modification	8.8 High	Dec 10, 2023
CVE-2023-6610	Kernel: oob access in smb2_dump_detail	7.1 High	Dec 8, 2023
CVE-2023-6606	Kernel: out-of-bounds read vulnerability in smbcalcsize	7.1 High	Dec 8, 2023
CVE-2023-5981	Gnutls: timing side-channel in the rsa-psk authentication	5.9 Medium	Nov 28, 2023
CVE-2023-5090	Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs	6.0 Medium	Nov 6, 2023
CVE-2023-42669	Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc	6.5 Medium	Nov 6, 2023
CVE-2023-3961	Samba: smbd allows client access to unix domain sockets on the file system as root	9.1 Critical	Nov 3, 2023

Other Red Hat products