Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat enterprise linux 7.6 vulnerabilities and exploits

(subscribe to this query)
5.4
CVSSv2
CVE-2019-3813
Spice, versions 0.5.2 up to and including 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers.
Spice Project SpiceRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Aus 7.6Debian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10
5
CVSSv2
CVE-2019-3816
Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request t...
Openwsman Project OpenwsmanRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Fedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 42.3Opensuse Leap 15.0
4.3
CVSSv2
CVE-2019-3838
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript prior to 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
Artifex GhostscriptRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux 5.0Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Aus 7.6Redhat Ansible Tower 3.3Fedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 42.3Opensuse Leap 15.0Debian Debian Linux 8.0Debian Debian Linux 9.0
5.8
CVSSv2
CVE-2019-10182
It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/> elements in JNLP files. An attacker could trick a victim into running a specially crafted application and use this flaw to upload arbitrary files to arbitrary locations in the c...
Icedtea-web Project Icedtea-webIcedtea-web Project Icedtea-web 1.8.2Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Aus 7.6
5.1
CVSSv2
CVE-2014-2440
Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and previous versions and 5.6.16 and previous versions allows remote malicious users to affect confidentiality, integrity, and availability via unknown vectors.
Oracle MysqlOracle Solaris 11.3Mariadb MariadbRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Eus 7.3Redhat Enterprise Linux Eus 7.4Redhat Enterprise Linux Eus 7.5Redhat Enterprise Linux Eus 7.6Redhat Enterprise Linux Eus 7.7Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux Server Aus 7.7Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Tus 7.7
4.4
CVSSv2
CVE-2019-6133
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c...
Polkit Project Polkit 0.115Debian Debian Linux 8.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server Aus 6.6Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04
2.1
CVSSv2
CVE-2018-18397
The userfaultfd implementation in the Linux kernel prior to 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains ho...
Linux Linux KernelRedhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Tus 7.4Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Workstation 7.0Redhat Openshift Container Platform 3.11Redhat Virtualization Host 4.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux Server Eus 7.5Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 14.04
7.5
CVSSv2
CVE-2018-18500
A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5, Fire...
Mozilla ThunderbirdMozilla Firefox EsrMozilla FirefoxCanonical Ubuntu Linux 18.10Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Debian Debian Linux 8.0Debian Debian Linux 9.0Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Workstation 7.0
7.5
CVSSv2
CVE-2018-18505
An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is star...
Mozilla FirefoxMozilla ThunderbirdMozilla Firefox EsrCanonical Ubuntu Linux 18.10Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Debian Debian Linux 8.0Debian Debian Linux 9.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Desktop 7.0
4.9
CVSSv2
CVE-2015-3147
daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other unspecified impact via a symlink attack on (1) /var/spool/abrt or (2) /var/tmp/abrt.
Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Automatic Bug Reporting Tool -Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Server Eus 7.1Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Eus 7.5Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux Server Eus 7.7Redhat Enterprise Linux Server Aus 7.7Redhat Enterprise Linux Server Tus 7.7
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook