Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat enterprise linux 7.0 vulnerabilities and exploits

(subscribe to this query)

4.9
CVSSv2
CVE-2016-7091
sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline...
Redhat Enterprise LinuxRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Workstation 7.0
7.5
CVSSv2
CVE-2016-7050
SerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to execute arbitrary code....
Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0
5
CVSSv2
CVE-2016-5416
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control...
Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Hpc Node 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Desktop 6.0
2.1
CVSSv2
CVE-2016-4455
The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories....
Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Hpc Node 7.0Redhat Subscription-manager
6.9
CVSSv2
CVE-2015-3247
Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via unspecified vectors....
Spice Project Spice 0.12.4Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node 6Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Server 6.0
5
CVSSv2
CVE-2016-5405
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords....
Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Hpc Node 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Workstation 7.0
5
CVSSv2
CVE-2015-5229
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors....
Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux 7.2Redhat Enterprise Linux 6.7Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node Eus 7.2Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Desktop 7.0
7.5
CVSSv2
CVE-2014-8241
XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a malloc return value, a similar issue to CVE-2014-6052....
Tigervnc Tigervnc -Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node 7.0
2.1
CVSSv2
CVE-2015-7837
The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec...
Redhat Kernel-rt 7.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 7.2Redhat Enterprise Linux 7.3Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Mrg 2.0
5
CVSSv2
CVE-2016-3099
mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled....
Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-23234CVE-2021-37470naviwebslogic flawCVE-2021-21985CVE-2019-13764arbitrary codeCVE-2021-37392navigatecmsCVE-2021-29770XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook