Enterprise Linux Server

CVEs (3,563)

• CVE-2015-7701HigAug 7, 2017
  NTP

  NTP
  risk 0.49cvss 7.5epss 0.07

  Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).

• CVE-2015-7692HigAug 7, 2017
  NTP

  NTP
  risk 0.49cvss 7.5epss 0.07

  The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.

• CVE-2015-7691HigAug 7, 2017
  NTP

  NTP
  risk 0.49cvss 7.5epss 0.07

  The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing particular autokey operations. NOTE: This vulnerability exists due to an incomplete fix for…

• CVE-2017-10664HigAug 2, 2017
  QEMU

  Qemu
  risk 0.49cvss 7.5epss 0.04

  qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.

• CVE-2015-7703HigJul 24, 2017
  NTP

  NTP
  risk 0.49cvss 7.5epss 0.04

  The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote…

• CVE-2015-5300HigJul 21, 2017
  NTP

  NTP
  risk 0.49cvss 7.5epss 0.09

  The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up…

• CVE-2017-10978HigJul 17, 2017
  FreeRADIUS

  Freeradius
  risk 0.49cvss 7.5epss 0.04

  An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service.

• CVE-2017-1000050HigJul 17, 2017
  Jasper

  JasPer
  risk 0.49cvss 7.5epss 0.03

  JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the image contained at least one component resulting in a denial-of-service.

• CVE-2017-9953HigJun 26, 2017
  Exiv2

  Exiv2
  risk 0.49cvss 7.5epss 0.03

  There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.

• CVE-2016-5416HigJun 8, 2017
  Red Hat

  Enterprise Linux Desktop
  risk 0.49cvss 7.5epss 0.03

  389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control…

• CVE-2016-4992HigJun 8, 2017
  Red Hat

  Enterprise Linux Desktop
  risk 0.49cvss 7.5epss 0.02

  389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to infer the existence of RDN component…

• CVE-2016-3099HigJun 8, 2017
  Red Hat

  Enterprise Linux Desktop
  risk 0.49cvss 7.5epss 0.02

  mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled.

• CVE-2016-6489HigApr 14, 2017
  Nettle Project

  Nettle
  risk 0.49cvss 7.5epss 0.05

  The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.

• CVE-2016-4459HigApr 12, 2017
  Red Hat

  Enterprise Linux Server
  risk 0.49cvss 7.5epss 0.03

  Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.

• CVE-2017-3302HigFeb 12, 2017
  MariaDB

  MariaDB
  risk 0.49cvss 7.5epss 0.05

  Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.

• CVE-2017-5848HigFeb 9, 2017
  Gstreamer

  Gstreamer
  risk 0.49cvss 7.5epss 0.04

  The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing.

• CVE-2016-9446HigJan 23, 2017
  Gstreamer

  Gstreamer
  risk 0.49cvss 7.5epss 0.04

  The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.

• CVE-2016-5418HigSep 21, 2016
  Libarchive

  Libarchive
  risk 0.49cvss 7.5epss 0.05

  The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file.

• CVE-2016-4809HigSep 21, 2016
  Libarchive

  Libarchive
  risk 0.49cvss 7.5epss 0.05

  The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.

• CVE-2016-2183HigSep 1, 2016
  OpenSSL Project

  OpenSSL
  risk 0.49cvss 7.5epss 0.96

  The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a…