Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat enterprise linux 7.0 vulnerabilities and exploits

(subscribe to this query)

4.4
CVSSv3
CVE-2016-7091
sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline...
Redhat Enterprise LinuxRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Workstation 7.0
9.8
CVSSv3
CVE-2016-7050
SerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to execute arbitrary code....
Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0
7.5
CVSSv3
CVE-2016-5416
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control...
Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Hpc Node 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Desktop 6.0
3.3
CVSSv3
CVE-2016-4455
The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories....
Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Hpc Node 7.0Redhat Subscription-manager
7.5
CVSSv3
CVE-2015-5229
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors....
Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux 7.2Redhat Enterprise Linux 6.7Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node Eus 7.2Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Desktop 7.0
9.8
CVSSv3
CVE-2016-5405
389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords....
Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Hpc Node 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Workstation 7.0
7.8
CVSSv3
CVE-2016-0758
Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data....
Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Hpc Node Eus 7.2Redhat Enterprise Linux Workstation 7.0Linux Linux Kernel
8.1
CVSSv3
CVE-2017-2590
A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs...
Freeipa FreeipaRedhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Eus 7.5Redhat Enterprise Linux 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Workstation 7.0
7
CVSSv3
CVE-2016-4989
setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by the _set_tpath function in audit_data.py or via a crafted (2) local_id or (3)...
Setroubleshoot Project SetroubleshootRedhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0
NA
CVE-2015-4815
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via vectors related to Server : DDL....
Oracle MysqlRedhat Enterprise Linux Server 7.0Redhat Enterprise Linux Hpc Node 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Hpc Node Eus 7.2Redhat Enterprise Linux Server Eus 7.2Oracle Linux 7Oracle Solaris 11.3Opensuse Leap 42.1Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-29214CVE-2022-29432CVE-2022-1388LFICVE-2022-1813SSRFCVE-2022-20821CVE-2021-41834XML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook