Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat enterprise linux eus 8.8 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2023-2295
A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the ...
Libreswan Libreswan 4.9-1.el8Libreswan Libreswan 4.9-1.el9Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Server Aus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2
8.8
CVSSv3
CVE-2023-2203
A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE ...
Webkitgtk Webkit2gtk3 2.38.5-1.el9Webkitgtk Webkit2gtk3 2.38.5-1.el8Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Server Aus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2
7.8
CVSSv3
CVE-2023-2491
A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs pa...
Gnu Emacs 26.1-9.el8Gnu Emacs 27.2-8.el9Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Server Aus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2
7
CVSSv3
CVE-2023-1476
A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the sys...
Linux Linux KernelRedhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64leRedhat Enterprise Linux For Power Little Endian Eus 8.8 Ppc64le
5.3
CVSSv3
CVE-2023-46846
SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote malicious user to perform Request/Response smuggling past firewall and frontend security systems.
Squid-cache SquidRedhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64leRedhat Enterprise Linux For Ibm Z Systems 8.0 S390xRedhat Enterprise Linux For Arm 64 8.0 Aarch64Redhat Enterprise Linux Server Tus 9.2
5.9
CVSSv3
CVE-2023-4813
A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured wit...
Gnu GlibcRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 9.2 Ppc64leRedhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Enterprise Linux For Ibm Z Systems S390x 9.2Redhat Enterprise Linux For Ibm Z Systems Eus S390x 9.2Fedoraproject Fedora 38Netapp Active Iq Unified Manager -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -
7.5
CVSSv3
CVE-2023-46847
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
Squid-cache SquidRedhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64leRedhat Enterprise Linux For Ibm Z Systems 8.0 S390xRedhat Enterprise Linux For Arm 64 8.0 Aarch64Redhat Enterprise Linux Server Tus 9.2
7.5
CVSSv3
CVE-2023-5157
A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.
Mariadb MariadbFedoraproject Fedora 38Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 9.0 Aarch64Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64leRedhat Enterprise Linux For Power Little Endian Eus 8.8 Ppc64leRedhat Enterprise Linux For Ibm Z Systems Eus 8.8 S390xRedhat Enterprise Linux For Ibm Z Systems 8.0 S390xRedhat Enterprise Linux For Arm 64 Eus 8.8 Aarch64Redhat Enterprise Linux For Arm 64 8.0 Aarch64
7.8
CVSSv3
CVE-2023-3972
A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege escalation. Before the insights-client has been registered on the system by root, an unp...
Redhat Insights-clientRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.1Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6Redhat Enterprise Linux For Ibm Z Systems Eus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6
7.8
CVSSv3
CVE-2023-3899
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.re...
Redhat Subscription-managerFedoraproject Fedora 37Fedoraproject Fedora 38Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.1Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6Redhat Enterprise Linux For Ibm Z Systems Eus 8.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook