Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2023-6478	Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty	7.6 High	Dec 13, 2023
CVE-2023-6377	Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions	7.8 High	Dec 13, 2023
CVE-2023-6710	Mod_cluster/mod_proxy_cluster: stored cross site scripting	5.4 Medium	Dec 12, 2023
CVE-2023-6679	Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c	5.5 Medium	Dec 11, 2023
CVE-2023-5870	Postgresql: role pg_signal_backend can signal certain superuser processes.	2.2 Low	Dec 10, 2023
CVE-2023-5868	Postgresql: memory disclosure in aggregate function calls	4.3 Medium	Dec 10, 2023
CVE-2023-5869	Postgresql: buffer overrun from integer overflow in array modification	8.8 High	Dec 10, 2023
CVE-2023-6560	An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel	5.5 Medium	Dec 8, 2023
CVE-2023-6622	Kernel: null pointer dereference vulnerability in nft_dynset_init()	5.5 Medium	Dec 8, 2023
CVE-2023-6610	Kernel: oob access in smb2_dump_detail	7.1 High	Dec 8, 2023
CVE-2023-6606	Kernel: out-of-bounds read vulnerability in smbcalcsize	7.1 High	Dec 8, 2023
CVE-2023-5981	Gnutls: timing side-channel in the rsa-psk authentication	5.9 Medium	Nov 28, 2023
CVE-2023-5871	Libnbd: malicious nbd server may crash libnbd	5.3 Medium	Nov 27, 2023
CVE-2023-6277	Libtiff: out-of-memory in tiffopen via a craft file	6.5 Medium	Nov 24, 2023
CVE-2023-5972	A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel	7.0 High	Nov 23, 2023
CVE-2023-6238	A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel	6.7 Medium	Nov 21, 2023
CVE-2023-6176	Kernel: local dos vulnerability in scatterwalk_copychunks	4.7 Medium	Nov 16, 2023
CVE-2023-6121	Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get	4.3 Medium	Nov 16, 2023
CVE-2023-39198	Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()	7.5 High	Nov 9, 2023
CVE-2023-6039	A use-after-free flaw was found in lan78xx_disconnect in drivers/net/usb/lan78xx.c in the network sub-component,…	5.5 Medium	Nov 9, 2023
CVE-2023-4154	A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active…	7.5 High	Nov 7, 2023
CVE-2023-40661	Opensc: multiple memory issues with pkcs15-init (enrollment tool)	5.4 Medium	Nov 6, 2023
CVE-2023-40660	Opensc: potential pin bypass when card tracks its own login state	6.6 Medium	Nov 6, 2023
CVE-2023-4535	Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys	4.5 Medium	Nov 6, 2023
CVE-2023-5090	Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs	6.0 Medium	Nov 6, 2023

Other Red Hat products