Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat enterprise linux for ibm z systems eus 8.4 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3
CVE-2021-3930
An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f). A malicious guest could use this flaw to potentially crash QEMU, result...
Qemu QemuRedhat Openstack 10Redhat Enterprise Linux 8.0Redhat Openstack 13Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Codeready Linux Builder For Ibm Z Systems 8.0Redhat Codeready Linux Builder For Power Little Endian 8.0Redhat Codeready Linux Builder 8.0Redhat Enterprise Linux Advanced Virtualization Eus 8.4Debian Debian Linux 9.0Debian Debian Linux 10.0
5.9
CVSSv3
CVE-2016-2124
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
Samba SambaDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Resilient Storage 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Gluster Storage 3.0Redhat Virtualization Host 4.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Openstack 13Redhat Openstack 16.1
8.1
CVSSv3
CVE-2020-25717
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.
Samba SambaDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Resilient Storage 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Gluster Storage 3.0Redhat Virtualization Host 4.0Redhat Virtualization 4.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Openstack 13
7.2
CVSSv3
CVE-2020-25719
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found withi...
Samba SambaDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 21.04Canonical Ubuntu Linux 21.10Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4
7.8
CVSSv3
CVE-2021-3551
A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local malicious user to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA man...
Dogtagpki DogtagpkiFedoraproject Fedora 33Fedoraproject Fedora 34Oracle Linux 8Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Enterprise Linux For Ibm Z Systems Eus 8.4Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Power Little Endian Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4
7.8
CVSSv3
CVE-2021-4034
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle ...
Polkit Project PolkitRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 7.7Redhat Enterprise Linux Server Tus 7.7Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.2
5.6
CVSSv3
CVE-2021-3672
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality ...
C-ares Project C-aresFedoraproject Fedora 33Fedoraproject Fedora 34Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 7.7Redhat Enterprise Linux 7.7Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Tus 8.4Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.1Redhat Enterprise Linux For Power Little Endian Eus 8.2Redhat Enterprise Linux For Ibm Z Systems Eus 8.2Redhat Enterprise Linux For Ibm Z Systems Eus 8.1Redhat Enterprise Linux For Power Little Endian Eus 8.1
6.5
CVSSv3
CVE-2020-14301
An information disclosure vulnerability was found in libvirt in versions prior to 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows an malicious user to access potentially sensitive information in the domain co...
Redhat LibvirtRedhat Enterprise Linux 8.0Redhat Enterprise Linux Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems Eus 8.4Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Enterprise Linux For Power Little Endian Eus 8.4Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4Netapp Ontap Select Deploy Administration Utility -Redhat Codeready Linux Builder -
7.5
CVSSv3
CVE-2020-9490
Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off&quo...
Apache Http ServerOracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Route ManagerOracle Communications Session Report ManagerOracle Communications Element ManagerOracle Zfs Storage Appliance Kit 8.8Opensuse Leap 15.1Opensuse Leap 15.2Debian Debian Linux 10.0Fedoraproject Fedora 31Fedoraproject Fedora 32Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Redhat Software Collections 1.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2
7.5
CVSSv3
CVE-2019-19906
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
Cyrusimap Cyrus-saslDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Fedoraproject Fedora 31Fedoraproject Fedora 32Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Jboss Enterprise Web Server 2.0.0Redhat Enterprise Linux 5.0Redhat Enterprise Linux 8.0Apple Mac Os X 10.14.6Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4Redhat Enterprise Linux For Power Little Endian 8.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook