Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat enterprise linux for ibm z systems 8.0 s390x vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv3
CVE-2023-4911
A buffer overflow exists in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local malicious user to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID perm...
Gnu GlibcFedoraproject Fedora 37Fedoraproject Fedora 38Fedoraproject Fedora 39Redhat Virtualization Host 4.0Redhat Virtualization 4.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Codeready Linux Builder For Power Little Endian Eus 8.6Redhat Codeready Linux Builder Eus 8.6Redhat Enterprise Linux 9.0Redhat Codeready Linux Builder For Ibm Z Systems Eus 8.6Redhat Codeready Linux Builder For Arm64 Eus 8.6Redhat Enterprise Linux For Arm 64 Eus 8.6 Aarch64Redhat Enterprise Linux For Ibm Z Systems Eus S390x 8.6Redhat Enterprise Linux For Power Big Endian Eus 8.6 Ppc64le
5.9
CVSSv3
CVE-2023-4806
A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hoo...
Gnu Glibc 2.33Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 9.2 Ppc64leRedhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Enterprise Linux For Ibm Z Systems S390x 9.2Redhat Enterprise Linux For Ibm Z Systems Eus S390x 9.2Redhat Enterprise Linux Tus 8.8Redhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian 9.0 Ppc64leRedhat Codeready Linux Builder For Ibm Z Systems 9.0 S390xRedhat Codeready Linux Builder For Arm64 9.0 Aarch64Redhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 Eus 9.2 Aarch64Redhat Enterprise Linux For Arm 64 9.0 Aarch64
6.5
CVSSv3
CVE-2023-4527
A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function ret...
Gnu GlibcRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 9.2 Ppc64leRedhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Enterprise Linux For Ibm Z Systems S390x 9.2Redhat Enterprise Linux For Ibm Z Systems Eus S390x 9.2Redhat Enterprise Linux Tus 8.8Redhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian 9.0 Ppc64leRedhat Codeready Linux Builder For Ibm Z Systems 9.0 S390xRedhat Codeready Linux Builder For Arm64 9.0 Aarch64Redhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 Eus 9.2 Aarch64Redhat Enterprise Linux For Arm 64 9.0 Aarch64Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64le
5.9
CVSSv3
CVE-2023-4813
A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured wit...
Gnu GlibcRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server Tus 8.8Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 9.2 Ppc64leRedhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Enterprise Linux For Ibm Z Systems S390x 9.2Redhat Enterprise Linux For Ibm Z Systems Eus S390x 9.2Fedoraproject Fedora 38Netapp Active Iq Unified Manager -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -
7.8
CVSSv3
CVE-2022-0330
A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.
Linux Linux KernelLinux Linux Kernel 5.17Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux For Real Time 7Redhat Enterprise Linux For Real Time For Nfv 7Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 7.7Redhat Enterprise Linux Server Tus 7.7Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux For Real Time 8Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4
8.8
CVSSv3
CVE-2022-0435
A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly esc...
Linux Linux Kernel 5.17Linux Linux KernelRedhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux For Real Time 8Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux For Real Time For Nfv Tus 8.4Redhat Enterprise Linux For Real Time For Nfv Tus 8.2Redhat Enterprise Linux For Real Time Tus 8.4Redhat Enterprise Linux For Real Time Tus 8.2Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux For Real Time For Nfv 8Redhat Enterprise Linux Server Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4Redhat Enterprise Linux For Power Little Endian Eus 8.2Redhat Enterprise Linux For Ibm Z Systems Eus 8.2Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems Eus 8.4Redhat Enterprise Linux For Ibm Z Systems 8.0
7.8
CVSSv3
CVE-2022-0847
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to...
Linux Linux KernelFedoraproject Fedora 35Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux For Real Time 8Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux For Real Time For Nfv Tus 8.4Redhat Enterprise Linux For Real Time For Nfv Tus 8.2Redhat Enterprise Linux For Real Time Tus 8.4Redhat Enterprise Linux For Real Time Tus 8.2Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux For Real Time For Nfv 8Redhat Enterprise Linux Server Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.1Redhat Enterprise Linux For Power Little Endian Eus 8.2Redhat Enterprise Linux For Ibm Z Systems Eus 8.2Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems Eus 8.4
7.8
CVSSv3
CVE-2022-0516
A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions bef...
Linux Linux KernelLinux Linux Kernel 5.17Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 11.0Redhat Virtualization Host 4.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems Eus 8.4Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Enterprise Linux For Power Little Endian Eus 8.4Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4Redhat Codeready Linux Builder -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -
7
CVSSv3
CVE-2021-3609
.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege e...
Linux Linux KernelRedhat Virtualization Host 4.0Redhat Virtualization 4.0Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Aus 8.2Redhat Openshift Container Platform 4.6Redhat 3scale Api Management 2.0Redhat Openshift Container Platform 4.7Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux For Real Time For Nfv Tus 8.2Redhat Enterprise Linux For Real Time Tus 8.2Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.1Redhat Enterprise Linux For Power Little Endian Eus 8.2Redhat Enterprise Linux For Power Little Endian Eus 8.1Redhat Enterprise Linux For Ibm Z Systems Eus 8.4
4.4
CVSSv3
CVE-2019-15718
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by e...
Systemd Project Systemd 240Fedoraproject Fedora 29Fedoraproject Fedora 30Fedoraproject Fedora 31Redhat Enterprise Linux 8.0Redhat Openshift Container Platform 4.1Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.1Redhat Enterprise Linux For Power Little Endian Eus 8.2Redhat Enterprise Linux For Ibm Z Systems Eus 8.2Redhat Enterprise Linux For Ibm Z Systems Eus 8.1Redhat Enterprise Linux For Power Little Endian Eus 8.1Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems Eus 8.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook