redhat enterprise linux 7.0 vulnerabilities and exploits

In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it.

Eclipse Openj9 0.11.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 6.0 Redhat Satellite 5.8 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 6.0

9.8

CVSSv3

An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the "createImageBitmap" API. This function runs in the content sandbox, requiring a second vulnerabili...

Redhat Enterprise Linux Server Aus 7.4 Redhat Enterprise Linux Server Aus 7.3 Redhat Enterprise Linux Server Eus 7.3 Redhat Enterprise Linux Server Eus 7.4 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server Eus 7.5 Mozilla Firefox Mozilla Firefox Esr

5.5

CVSSv3

The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote malicious users to cause a denial of service (segmentation fault) via a large attribute section.

Gnu Binutils 2.30 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0

5.5

CVSSv3

process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote malicious users to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary file, as demonstrated by readelf.

Gnu Binutils 2.30 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 7.0

6.5

CVSSv3

concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by nm-...

Gnu Binutils 2.30 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0

7.5

CVSSv3

The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive prior to 3.2.1 allows remote malicious users to cause a denial of service (application crash) via a CPIO archive with a large symlink.

Redhat Enterprise Linux Hpc Node 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server Eus 7.2 Redhat Enterprise Linux Hpc Node Eus 7.2 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Hpc Node 7.0 Redhat Enterprise Linux Server Aus 7.2 Oracle Linux 6 Oracle Linux 7 Libarchive Libarchive

7.8

CVSSv3

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and acce...

Artifex Ghostscript Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux 5.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Server Eus 7.7 Redhat Enterprise Linux Server Aus 7.7 Redhat Enterprise Linux Server Tus 7.7 Redhat 3scale Api Management 2.6

1 Github repository

5.5

CVSSv3

JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.

Jasper Project Jasper Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Server Eus 7.4 Redhat Enterprise Linux Workstation 6.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Server Eus 7.3 Debian Debian Linux 8.0

9.8

CVSSv3

A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.

7.1

CVSSv3

An information leak flaw was found in the way SMB1 protocol was implemented by Samba prior to 4.4.16, 4.5.x prior to 4.5.14, and 4.6.x prior to 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though...

Samba Samba Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Gluster Storage 3.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0

1 Github repository

Get Started

« PREV 1 2 3 4 5 6 7 8 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

redhat enterprise linux 7.0 vulnerabilities and exploits

Vulmon Search

About

Products

Connect