Known vulnerabilities in Red Hat Enterprise Linux 9
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-32257 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server | 8.1 High | Jul 24, 2023 |
| CVE-2023-32252 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server | 7.5 High | Jul 24, 2023 |
| CVE-2023-32258 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server | 8.1 High | Jul 24, 2023 |
| CVE-2023-1386 | A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU | 3.3 Low | Jul 24, 2023 |
| CVE-2023-33951 | Kernel: vmwgfx: race condition leading to information disclosure vulnerability | 6.7 Medium | Jul 24, 2023 |
| CVE-2023-32247 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server | 7.5 High | Jul 24, 2023 |
| CVE-2023-3750 | Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service | 6.5 Medium | Jul 24, 2023 |
| CVE-2023-3812 | Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags | 7.8 High | Jul 24, 2023 |
| CVE-2023-3748 | A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored | 3.5 Low | Jul 24, 2023 |
| CVE-2023-3567 | Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race | 7.1 High | Jul 24, 2023 |
| CVE-2023-3019 | Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() | 6.0 Medium | Jul 24, 2023 |
| CVE-2023-38200 | A flaw was found in Keylime | 7.5 High | Jul 24, 2023 |
| CVE-2023-33952 | Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects | 6.7 Medium | Jul 24, 2023 |
| CVE-2023-2860 | An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel | 4.4 Medium | Jul 24, 2023 |
| CVE-2023-3863 | A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel | 6.4 Medium | Jul 24, 2023 |
| CVE-2023-3603 | A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions | 3.1 Low | Jul 21, 2023 |
| CVE-2023-34968 | Samba: spotlight server-side share path disclosure | 5.3 Medium | Jul 20, 2023 |
| CVE-2023-34967 | Samba: type confusion in mdssvc rpc service for spotlight | 5.3 Medium | Jul 20, 2023 |
| CVE-2023-34966 | Samba: infinite loop in mdssvc rpc service for spotlight | 7.5 High | Jul 20, 2023 |
| CVE-2023-3347 | Samba: smb2 packet signing is not enforced when "server signing = required" is set | 5.9 Medium | Jul 20, 2023 |
| CVE-2022-2127 | Samba: out-of-bounds read in winbind auth_crap | 5.9 Medium | Jul 20, 2023 |
| CVE-2023-3674 | A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty… | 2.3 Low | Jul 19, 2023 |
| CVE-2023-0160 | A deadlock flaw was found in the Linux kernel’s BPF subsystem | 4.7 Medium | Jul 18, 2023 |
| CVE-2023-3618 | A flaw was found in libtiff | 6.5 Medium | Jul 12, 2023 |
| CVE-2023-3106 | Kernel: netlink socket crash (null pointer deref) in netlink_dump function | 6.6 Medium | Jul 12, 2023 |
Other Red Hat products
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430