Enterprise Linux Server Tus

CVEs (768)

• CVE-2015-8126Nov 13, 2015
  Libpng

  Libpng
  risk 0.01cvss —epss 0.10

  Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application…

• CVE-2015-4816Oct 21, 2015
  Fedoraproject

  Fedora
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.

• CVE-2015-5165Aug 12, 2015
  Xen

  Xen
  risk 0.01cvss —epss 0.13

  The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.

• CVE-2015-4757Jul 16, 2015
  MariaDB

  MariaDB
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

• CVE-2015-3209Jun 15, 2015
  QEMU

  Qemu
  risk 0.01cvss —epss 0.10

  Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.

• CVE-2015-2568Apr 16, 2015
  MariaDB

  MariaDB
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server : Security : Privileges.

• CVE-2015-0501Apr 16, 2015
  MariaDB

  MariaDB
  risk 0.01cvss —epss 0.10

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling.

• CVE-2015-0391Jan 21, 2015
  MariaDB

  MariaDB
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

• CVE-2015-0382Jan 21, 2015
  Fedoraproject

  Fedora
  risk 0.01cvss —epss 0.10

  Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381.

• CVE-2014-6568Jan 21, 2015
  Fedoraproject

  Fedora
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML.

• CVE-2014-8964Dec 16, 2014
  Pcre

  Pcre
  risk 0.01cvss —epss 0.07

  Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression, related to an assertion that allows zero repeats.

• CVE-2014-3581Oct 10, 2014
  Apache

  HTTP Server
  risk 0.01cvss —epss 0.14

  The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

• CVE-2014-3467Jun 5, 2014
  GNU

  Gnutls
  risk 0.01cvss —epss 0.07

  Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.

• CVE-2023-3758HigApr 18, 2024
  SSSD

  Sssd
  risk 0.00cvss 7.1epss 0.01

  A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

• CVE-2023-1476HigNov 3, 2023
  Linux

  Kernel
  risk 0.00cvss 7.0epss 0.00

  A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system.

• CVE-2023-3972HigNov 1, 2023
  Red Hat

  insights-client
  risk 0.00cvss 7.8epss 0.00

  A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege escalation. Before the insights-client has been registered on the system by root, an…

• CVE-2023-0494HigMar 27, 2023
  Fedoraproject

  Fedora
  risk 0.00cvss 7.8epss 0.01

  A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where…

• CVE-2022-4254HigFeb 1, 2023
  SSSD

  Sssd
  risk 0.00cvss 8.8epss 0.01

  sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

• CVE-2021-3975MedAug 23, 2022
  Libvirt

  Libvirt
  risk 0.00cvss 6.5epss 0.01

  A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the…

• CVE-2021-31566HigAug 23, 2022
  Fedoraproject

  Fedora
  risk 0.00cvss 7.8epss 0.00

  An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to…