Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

linux enterprise server vulnerabilities and exploits

(subscribe to this query)
10
CVSSv3
CVE-2024-3400
A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated malicious user to execute arbitrary code with root privileges on the firewall. Cloud...
Paloaltonetworks Pan-os 11.0.0Paloaltonetworks Pan-os 10.2.0Paloaltonetworks Pan-os 11.1.0
6.5
CVSSv3
CVE-2023-52160
The implementation of PEAP in wpa_supplicant up to and including 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can...
W1.fi Wpa SupplicantDebian Debian Linux 10.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Fedoraproject Fedora 39
7.5
CVSSv3
CVE-2023-50387
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote malicious users to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is...
Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Microsoft Windows Server 2008 R2Microsoft Windows Server 2012 R2Microsoft Windows Server 2016 -Microsoft Windows Server 2012 -Microsoft Windows Server 2019 -Microsoft Windows Server 2022 -Microsoft Windows Server 2022 23h2 -Fedoraproject Fedora 39Thekelleys DnsmasqNic Knot ResolverPowerdns RecursorIsc BindNlnetlabs Unbound
7.5
CVSSv3
CVE-2023-6356
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a...
Linux Linux Kernel -Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Codeready Linux Builder Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 Eus 9.2 Aarch64Redhat Enterprise Linux For Arm 64 Eus 8.6 Aarch64Redhat Enterprise Linux For Ibm Z Systems Eus 9.2 S390xRedhat Enterprise Linux For Ibm Z Systems Eus 8.6 S390xRedhat Codeready Linux Builder For Arm64 Eus 8.6 Aarch64Redhat Enterprise Linux For Power Little Endian Eus 8.6 Ppc64leRedhat Enterprise Linux For Real Time For Nfv 9.2
7.5
CVSSv3
CVE-2023-6535
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a de...
Linux Linux Kernel -Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Codeready Linux Builder Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 Eus 9.2 Aarch64Redhat Enterprise Linux For Arm 64 Eus 8.6 Aarch64Redhat Enterprise Linux For Ibm Z Systems Eus 9.2 S390xRedhat Enterprise Linux For Ibm Z Systems Eus 8.6 S390xRedhat Codeready Linux Builder For Arm64 Eus 8.6 Aarch64Redhat Enterprise Linux For Power Little Endian Eus 8.6 Ppc64leRedhat Enterprise Linux For Real Time For Nfv 9.2
7.5
CVSSv3
CVE-2023-6536
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a de...
Linux Linux Kernel -Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Codeready Linux Builder Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 Eus 9.2 Aarch64Redhat Enterprise Linux For Arm 64 Eus 8.6 Aarch64Redhat Enterprise Linux For Ibm Z Systems Eus 9.2 S390xRedhat Enterprise Linux For Ibm Z Systems Eus 8.6 S390xRedhat Codeready Linux Builder For Arm64 Eus 8.6 Aarch64Redhat Enterprise Linux For Power Little Endian Eus 8.6 Ppc64leRedhat Enterprise Linux For Real Time For Nfv 9.2
8.3
CVSSv3
CVE-2023-40547
A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an malicious user to craft a specific malicious HTTP request, leading to a completely controlled out-of-bounds write pr...
Redhat ShimRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
5.5
CVSSv3
CVE-2024-0408
A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access t...
X.org XwaylandX.org Xorg-serverTigervnc TigervncRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Fedoraproject Fedora 39
7.8
CVSSv3
CVE-2024-0409
A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.
X.org XwaylandX.org Xorg-serverTigervnc TigervncRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Fedoraproject Fedora 39
9.8
CVSSv3
CVE-2023-6816
A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular num...
X.org XwaylandX.org Xorg-serverFedoraproject Fedora 39Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Debian Debian Linux 10.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook