Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2023-38201	A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent…	6.5 Medium	Aug 25, 2023
CVE-2023-4042	Ghostscript: incomplete fix for cve-2020-16305	5.5 Medium	Aug 23, 2023
CVE-2023-3899	Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration	7.8 High	Aug 23, 2023
CVE-2023-4459	Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()	5.5 Medium	Aug 21, 2023
CVE-2023-4394	A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the…	6.7 Medium	Aug 17, 2023
CVE-2023-4389	A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double…	7.0 High	Aug 16, 2023
CVE-2023-4387	Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()	7.1 High	Aug 16, 2023
CVE-2023-4385	Kernel: jfs: null pointer dereference in dbfree()	5.5 Medium	Aug 16, 2023
CVE-2023-39418	Postgresql: merge fails to enforce update or select row security policies	3.1 Low	Aug 11, 2023
CVE-2023-39417	Postgresql: extension script @substitutions@ within quoting allow sql injection	7.5 High	Aug 11, 2023
CVE-2023-4273	Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry	6.0 Medium	Aug 9, 2023
CVE-2023-4194	Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid	5.5 Medium	Aug 7, 2023
CVE-2023-4147	Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free	7.8 High	Aug 7, 2023
CVE-2023-4135	A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU	6.0 Medium	Aug 4, 2023
CVE-2023-4132	Kernel: smsusb: use-after-free caused by do_submit_urb()	5.5 Medium	Aug 3, 2023
CVE-2023-4133	Kernel: cxgb4: use-after-free in ch_flower_stats_cb()	5.5 Medium	Aug 3, 2023
CVE-2023-3180	A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in…	6.0 Medium	Aug 3, 2023
CVE-2023-38560	Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name	5.5 Medium	Aug 1, 2023
CVE-2023-38559	Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos	5.5 Medium	Aug 1, 2023
CVE-2023-4010	A flaw was found in the USB Host Controller Driver framework in the Linux kernel	4.6 Medium	Jul 31, 2023
CVE-2023-4004	Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()	7.8 High	Jul 31, 2023
CVE-2023-3773	Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr	5.5 Medium	Jul 25, 2023
CVE-2023-3772	Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()	5.5 Medium	Jul 25, 2023
CVE-2023-3640	A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to…	7.0 High	Jul 24, 2023
CVE-2023-32248	A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server	7.5 High	Jul 24, 2023

Other Red Hat products