Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat enterprise linux for arm 64 9.0 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2023-6535
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a de...
Linux Linux Kernel -Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Codeready Linux Builder Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 Eus 9.2 Aarch64Redhat Enterprise Linux For Arm 64 Eus 8.6 Aarch64Redhat Enterprise Linux For Ibm Z Systems Eus 9.2 S390xRedhat Enterprise Linux For Ibm Z Systems Eus 8.6 S390xRedhat Codeready Linux Builder For Arm64 Eus 8.6 Aarch64Redhat Enterprise Linux For Power Little Endian Eus 8.6 Ppc64leRedhat Enterprise Linux For Real Time For Nfv 9.2
7.5
CVSSv3
CVE-2023-6356
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a...
Linux Linux Kernel -Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Codeready Linux Builder Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 Eus 9.2 Aarch64Redhat Enterprise Linux For Arm 64 Eus 8.6 Aarch64Redhat Enterprise Linux For Ibm Z Systems Eus 9.2 S390xRedhat Enterprise Linux For Ibm Z Systems Eus 8.6 S390xRedhat Codeready Linux Builder For Arm64 Eus 8.6 Aarch64Redhat Enterprise Linux For Power Little Endian Eus 8.6 Ppc64leRedhat Enterprise Linux For Real Time For Nfv 9.2
7.5
CVSSv3
CVE-2023-6536
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a de...
Linux Linux Kernel -Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Codeready Linux Builder Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 Eus 9.2 Aarch64Redhat Enterprise Linux For Arm 64 Eus 8.6 Aarch64Redhat Enterprise Linux For Ibm Z Systems Eus 9.2 S390xRedhat Enterprise Linux For Ibm Z Systems Eus 8.6 S390xRedhat Codeready Linux Builder For Arm64 Eus 8.6 Aarch64Redhat Enterprise Linux For Power Little Endian Eus 8.6 Ppc64leRedhat Enterprise Linux For Real Time For Nfv 9.2
6.5
CVSSv3
CVE-2023-5455
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an malicious user to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and syst...
Freeipa FreeipaFreeipa Freeipa 4.11.0Fedoraproject Fedora 38Fedoraproject Fedora 39Fedoraproject Fedora 40Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.2Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4
5.5
CVSSv3
CVE-2023-4641
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve ...
Shadow-maint Shadow-utilsRedhat Enterprise Linux 8.0Redhat Codeready Linux Builder 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux For Arm 64 9.0Redhat Enterprise Linux For Arm 64 8.0Redhat Codeready Linux Builder For Ibm Z Systems 9.0 S390xRedhat Codeready Linux Builder For Arm64 9.0 Aarch64Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64leRedhat Enterprise Linux For Ibm Z Systems 8.0 S390xRedhat Codeready Linux Builder For Power Little Endian 9.0 Ppc64leRedhat Codeready Linux Builder 9.0Redhat Enterprise Linux For Power Little Endian 9.0 Ppc64leRedhat Enterprise Linux For Ibm Z Systems 9.0 S390xRedhat Codeready Linux Builder For Ibm Z Systems 8.0 S390xRedhat Codeready Linux Builder For Arm64 8.0 Aarch64Redhat Codeready Linux Builder For Power Little Endian 8.0 Ppc64le
4.3
CVSSv3
CVE-2023-5868
A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type de...
Postgresql Postgresql 16.0Postgresql PostgresqlRedhat Software Collections 1.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Arm 64 8.0Redhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2
8.8
CVSSv3
CVE-2023-5869
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overfl...
Postgresql Postgresql 16.0Postgresql PostgresqlRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux Server 7.0Redhat Software Collections 1.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Arm 64 8.0Redhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64le
4.4
CVSSv3
CVE-2023-5870
A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background...
Postgresql Postgresql 16.0Postgresql PostgresqlRedhat Software Collections 1.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Arm 64 8.0Redhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2
5.3
CVSSv3
CVE-2023-46846
SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote malicious user to perform Request/Response smuggling past firewall and frontend security systems.
Squid-cache SquidRedhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64leRedhat Enterprise Linux For Ibm Z Systems 8.0 S390xRedhat Enterprise Linux For Arm 64 8.0 Aarch64Redhat Enterprise Linux Server Tus 9.2
7.5
CVSSv3
CVE-2023-46847
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
Squid-cache SquidRedhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64leRedhat Enterprise Linux For Ibm Z Systems 8.0 S390xRedhat Enterprise Linux For Arm 64 8.0 Aarch64Redhat Enterprise Linux Server Tus 9.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook