Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat enterprise linux 5 vulnerabilities and exploits

(subscribe to this query)
5.9
CVSSv3
CVE-2023-48795
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH prior to 9.6 and other products, allows remote malicious users to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may conseque...
Openbsd OpensshPutty PuttyFilezilla-project Filezilla ClientMicrosoft PowershellPanic Transmit 5Panic NovaRoumenpetrov PkixsshWinscp WinscpBitvise Ssh ClientBitvise Ssh ServerLancom-systems LcosLancom-systems Lcos Fx -Lancom-systems Lcos Lx -Lancom-systems Lcos Sx 5.20Lancom-systems Lcos Sx 4.20Lancom-systems Lanconfig -Vandyke SecurecrtLibssh LibsshNet-ssh Net-ssh 7.2.0Ssh2 Project Ssh2Proftpd ProftpdFreebsd Freebsd
7.5
CVSSv3
CVE-2023-46848
Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.
Squid-cache SquidRedhat Enterprise Linux 9.0Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux Server Tus 9.2
6.5
CVSSv3
CVE-2022-40982
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Redhat Enterprise Linux 7.0Xen Xen -Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Intel MicrocodeIntel Xeon E-2314 Firmware -Intel Xeon E-2324g Firmware -Intel Xeon E-2334 Firmware -Intel Xeon E-2374g Firmware -Intel Xeon E-2336 Firmware -Intel Xeon E-2356g Firmware -Intel Xeon E-2386g Firmware -Intel Xeon E-2378 Firmware -Intel Xeon E-2378g Firmware -Intel Xeon E-2388g Firmware -Intel Xeon W-1350 Firmware -Intel Xeon W-1350p Firmware -Intel Xeon W-1370 Firmware -Intel Xeon W-1370p Firmware -Intel Xeon W-1390t Firmware -Intel Xeon W-1390 Firmware -
7.4
CVSSv3
CVE-2023-0361
A timing side-channel in the handling of RSA ClientKeyExchange messages exists in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker woul...
Gnu Gnutls 3.6.8-11.el8 2Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 36Fedoraproject Fedora 37Fedoraproject Fedora 38Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Converged Systems Advisor Agent -
6.2
CVSSv3
CVE-2014-0147
Qemu prior to 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling update_refcount()...
Qemu QemuFedoraproject Fedora 20Redhat Enterprise Linux Server Aus 6.5Redhat Enterprise Linux Server Tus 6.5Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Virtualization 3.0Redhat Enterprise Linux Eus 6.5Redhat Enterprise Linux Openstack Platform 5
5.5
CVSSv3
CVE-2014-0148
Qemu prior to 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block_size and logical_sector_size variables. These are used to derive other fields like 'sectors_...
Qemu QemuRedhat Enterprise Linux Server Aus 6.5Redhat Enterprise Linux Server Tus 6.5Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Virtualization 3.0Redhat Enterprise Linux Eus 6.5Redhat Enterprise Linux Openstack Platform 5
8.6
CVSSv3
CVE-2014-0144
QEMU prior to 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused by missing input validations which could allow a remote user to execute arbitrary code on the host...
Qemu QemuRedhat Enterprise Linux Server Aus 6.5Redhat Enterprise Linux Server Tus 6.5Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Virtualization 3.0Redhat Enterprise Linux Eus 6.5Redhat Enterprise Linux Openstack Platform 5
7.5
CVSSv3
CVE-2022-2509
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.
Gnu GnutlsRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Fedoraproject Fedora 35Debian Debian Linux 10.0Debian Debian Linux 11.0
7.5
CVSSv3
CVE-2022-27191
The golang.org/x/crypto/ssh package prior to 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an malicious user to crash a server in certain circumstances involving AddHostKey.
Golang SshFedoraproject Fedora 34Fedoraproject Extra Packages For Enterprise Linux 8.0Fedoraproject Fedora 35Fedoraproject Fedora 36Redhat Advanced Cluster Management For Kubernetes 2.0
8.8
CVSSv3
CVE-2021-3656
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" fiel...
Linux Linux Kernel 5.14Linux Linux KernelFedoraproject Fedora 33Fedoraproject Fedora 34Redhat Software Collections -Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux For Real Time 7Redhat Enterprise Linux For Real Time For Nfv 7Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 7.7Redhat Enterprise Linux Server Tus 7.7Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook