redhat enterprise linux server aus 7.2 vulnerabilities and exploits

(subscribe to this query)

5.8

CVSSv2

While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when configured to verify the peer certificate* while used with OpenS...

1 Github repository

4.3

CVSSv2

Unspecified vulnerability in Oracle MySQL 5.5.48 and previous versions, 5.6.29 and previous versions, and 5.7.11 and previous versions and MariaDB prior to 5.5.49, 10.0.x prior to 10.0.25, and 10.1.x prior to 10.1.14 allows remote malicious users to affect confidentiality via vec...

7.2

CVSSv2

The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel prior to 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.

2.1

CVSSv2

The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel prior to 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). Th...

Linux Linux Kernel Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 12.04 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server Tus 7.2 Redhat Enterprise Linux Server Tus 7.4 Redhat Enterprise Linux Server Aus 7.4 Redhat Enterprise Linux Server Aus 7.2 Redhat Enterprise Linux Server Eus 7.3 Redhat Enterprise Linux Server Aus 7.3 Redhat Enterprise Linux Server Tus 7.3 Redhat Mrg Realtime 2.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Server Eus 7.5

2 Github repositories1 Article

7.2

CVSSv2

Integer overflow in lib/asn1_decoder.c in the Linux kernel prior to 4.6 allows local users to gain privileges via crafted ASN.1 data.

Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server Aus 7.2 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Hpc Node 7.0 Redhat Enterprise Linux Server Eus 7.2 Redhat Enterprise Linux Hpc Node Eus 7.2 Linux Linux Kernel Canonical Ubuntu Linux 16.04

7.2

CVSSv2

A flaw was found in grub2 in versions before 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or...

1 Github repository

7.2

CVSSv2

A flaw was found in grub2 in versions before 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a com...

6.9

CVSSv2

A flaw was found in grub2 in versions before 2.06. The cutmem command does not honor secure boot locking allowing an privileged malicious user to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's m...

7.2

CVSSv2

A flaw was found in grub2 in versions before 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary ...

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook