Known vulnerabilities in Red Hat Enterprise Linux 9
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-0232 | Sqlite: use-after-free bug in jsonparseaddnodearray | 4.7 Medium | Jan 16, 2024 |
| CVE-2024-0553 | Gnutls: incomplete fix for cve-2023-5981 | 7.5 High | Jan 16, 2024 |
| CVE-2024-0565 | Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client | 6.8 Medium | Jan 15, 2024 |
| CVE-2024-0562 | Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c | 7.8 High | Jan 15, 2024 |
| CVE-2023-4001 | Grub2: bypass the grub password protection feature | 6.8 Medium | Jan 15, 2024 |
| CVE-2023-6915 | Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c | 6.2 Medium | Jan 15, 2024 |
| CVE-2023-6683 | Qemu: vnc: null pointer dereference in qemu_clipboard_request() | 6.5 Medium | Jan 12, 2024 |
| CVE-2024-0443 | Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline. | 5.5 Medium | Jan 11, 2024 |
| CVE-2023-5455 | Ipa: invalid csrf protection | 6.5 Medium | Jan 10, 2024 |
| CVE-2024-0340 | Kernel: information disclosure in vhost/vhost.c:vhost_new_msg() | 4.4 Medium | Jan 9, 2024 |
| CVE-2023-6270 | Kernel: aoe: improper reference count leads to use-after-free vulnerability | 7.0 High | Jan 4, 2024 |
| CVE-2024-0217 | Packagekitd: use-after-free in idle function callback | 3.3 Low | Jan 3, 2024 |
| CVE-2023-6004 | Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname | 4.8 Medium | Jan 3, 2024 |
| CVE-2023-7192 | Kernel: refcount leak in ctnetlink_create_conntrack() | 5.5 Medium | Jan 2, 2024 |
| CVE-2024-0193 | Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation | 7.8 High | Jan 2, 2024 |
| CVE-2023-6693 | Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx() | 4.9 Medium | Jan 2, 2024 |
| CVE-2023-47039 | A vulnerability was found in Perl | 7.8 High | Jan 2, 2024 |
| CVE-2023-4641 | A flaw was found in shadow-utils | 4.7 Medium | Dec 27, 2023 |
| CVE-2023-7090 | A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated… | 6.6 Medium | Dec 23, 2023 |
| CVE-2023-7008 | A vulnerability was found in systemd-resolved | 5.9 Medium | Dec 23, 2023 |
| CVE-2023-7042 | Kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() | 4.4 Medium | Dec 21, 2023 |
| CVE-2023-6546 | Kernel: gsm multiplexing race condition leads to privilege escalation | 7.0 High | Dec 21, 2023 |
| CVE-2023-6918 | Libssh: missing checks for return values for digests | 3.7 Low | Dec 18, 2023 |
| CVE-2023-6228 | Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c | 3.3 Low | Dec 18, 2023 |
| CVE-2023-47038 | A vulnerability was found in perl 5.30.0 through 5.38.0 | 7.0 High | Dec 18, 2023 |
Other Red Hat products
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430