Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat migration toolkit for runtimes - vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3
CVE-2023-4641
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve ...
Shadow-maint Shadow-utilsRedhat Enterprise Linux 8.0Redhat Codeready Linux Builder 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux For Arm 64 9.0Redhat Enterprise Linux For Arm 64 8.0Redhat Codeready Linux Builder For Ibm Z Systems 9.0 S390xRedhat Codeready Linux Builder For Arm64 9.0 Aarch64Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64leRedhat Enterprise Linux For Ibm Z Systems 8.0 S390xRedhat Codeready Linux Builder For Power Little Endian 9.0 Ppc64leRedhat Codeready Linux Builder 9.0Redhat Enterprise Linux For Power Little Endian 9.0 Ppc64leRedhat Enterprise Linux For Ibm Z Systems 9.0 S390xRedhat Codeready Linux Builder For Ibm Z Systems 8.0 S390xRedhat Codeready Linux Builder For Arm64 8.0 Aarch64Redhat Codeready Linux Builder For Power Little Endian 8.0 Ppc64le
5.9
CVSSv3
CVE-2023-5981
A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
Gnu Gnutls 1.5.0Redhat Linux 8.0Redhat Linux 9.0Fedoraproject Fedora 37Fedoraproject Fedora 38
5.5
CVSSv3
CVE-2023-38473
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.
Avahi AvahiRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
5.5
CVSSv3
CVE-2023-38469
A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.
Avahi AvahiRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
5.5
CVSSv3
CVE-2023-38470
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.
Avahi AvahiRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
5.5
CVSSv3
CVE-2023-38471
A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.
Avahi AvahiRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
5.5
CVSSv3
CVE-2023-38472
A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.
Avahi AvahiRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0
7.5
CVSSv3
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
7.8
CVSSv3
CVE-2023-4911
A buffer overflow exists in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local malicious user to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID perm...
Gnu GlibcFedoraproject Fedora 37Fedoraproject Fedora 38Fedoraproject Fedora 39Redhat Virtualization Host 4.0Redhat Virtualization 4.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Codeready Linux Builder For Power Little Endian Eus 8.6Redhat Codeready Linux Builder Eus 8.6Redhat Enterprise Linux 9.0Redhat Codeready Linux Builder For Ibm Z Systems Eus 8.6Redhat Codeready Linux Builder For Arm64 Eus 8.6Redhat Enterprise Linux For Arm 64 Eus 8.6 Aarch64Redhat Enterprise Linux For Ibm Z Systems Eus S390x 8.6Redhat Enterprise Linux For Power Big Endian Eus 8.6 Ppc64le
6.5
CVSSv3
CVE-2023-4527
A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function ret...
Gnu GlibcRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Power Little Endian 9.2 Ppc64leRedhat Enterprise Linux For Power Little Endian Eus 9.2 Ppc64leRedhat Enterprise Linux For Ibm Z Systems S390x 9.2Redhat Enterprise Linux For Ibm Z Systems Eus S390x 9.2Redhat Enterprise Linux Tus 8.8Redhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder Eus For Power Little Endian 9.0 Ppc64leRedhat Codeready Linux Builder For Ibm Z Systems 9.0 S390xRedhat Codeready Linux Builder For Arm64 9.0 Aarch64Redhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder Eus 9.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.2 Ppc64leRedhat Enterprise Linux For Arm 64 Eus 9.2 Aarch64Redhat Enterprise Linux For Arm 64 9.0 Aarch64Redhat Enterprise Linux For Power Little Endian 8.0 Ppc64le
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook