Vulnérabilités connues pour Red Hat Enterprise Linux 9.0 Extended Update Support

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2023-6546	Kernel: gsm multiplexing race condition leads to privilege escalation	7.0 Élevée	21 déc. 2023
CVE-2023-6478	Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty	7.6 Élevée	13 déc. 2023
CVE-2023-6377	Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions	7.8 Élevée	13 déc. 2023
CVE-2023-5870	Postgresql: role pg_signal_backend can signal certain superuser processes.	2.2 Faible	10 déc. 2023
CVE-2023-5868	Postgresql: memory disclosure in aggregate function calls	4.3 Moyenne	10 déc. 2023
CVE-2023-5869	Postgresql: buffer overrun from integer overflow in array modification	8.8 Élevée	10 déc. 2023
CVE-2023-42669	Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc	6.5 Moyenne	6 nov. 2023
CVE-2023-3961	Samba: smbd allows client access to unix domain sockets on the file system as root	9.1 Critique	3 nov. 2023
CVE-2023-46847	Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to…	8.6 Élevée	3 nov. 2023
CVE-2023-46848	Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP…	8.6 Élevée	3 nov. 2023
CVE-2023-5824	Squid: dos against http and https	7.5 Élevée	3 nov. 2023
CVE-2023-4091	Samba: smb clients can truncate files with read-only permissions	6.5 Moyenne	3 nov. 2023
CVE-2023-46846	SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform…	9.3 Critique	3 nov. 2023
CVE-2023-5178	Kernel: use after free in nvmet_tcp_free_crypto in nvme	8.8 Élevée	1 nov. 2023
CVE-2023-3972	Insights-client: unsafe handling of temporary files and directories	7.8 Élevée	1 nov. 2023
CVE-2023-5367	Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty	7.8 Élevée	25 oct. 2023
CVE-2023-5557	Tracker-miners: sandbox escape	7.5 Élevée	13 oct. 2023
CVE-2023-4911	Exploitée Glibc: buffer overflow in ld.so leading to privilege escalation	7.8 Élevée	3 oct. 2023
CVE-2023-5157	Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6	7.5 Élevée	26 sept. 2023
CVE-2023-42753	Kernel: netfilter: potential slab-out-of-bound access due to integer underflow	7.0 Élevée	25 sept. 2023
CVE-2023-3899	Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration	7.8 Élevée	23 août 2023
CVE-2023-4459	Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()	5.5 Moyenne	21 août 2023
CVE-2023-39417	Postgresql: extension script @substitutions@ within quoting allow sql injection	7.5 Élevée	11 août 2023
CVE-2023-4147	Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free	7.8 Élevée	7 août 2023
CVE-2023-4004	Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()	7.8 Élevée	31 juil. 2023

Autres produits Red Hat