Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat enterprise linux eus 7.4 vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3
CVE-2018-18397
The userfaultfd implementation in the Linux kernel prior to 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains ho...
Linux Linux KernelRedhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Tus 7.4Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Workstation 7.0Redhat Openshift Container Platform 3.11Redhat Virtualization Host 4.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux Server Eus 7.5Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 14.04
6.5
CVSSv3
CVE-2016-2125
It was found that Samba prior to 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
Samba SambaRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Eus 7.4Redhat Gluster Storage 3.0Redhat Enterprise Linux Server Eus 7.5Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Aus 7.6
7.5
CVSSv3
CVE-2018-14622
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker c...
Redhat Enterprise Linux 7.0Debian Debian Linux 8.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Redhat Enterprise Linux Server Aus 7.4Canonical Ubuntu Linux 18.04Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Eus 7.5Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Eus 7.6Libtirpc Project Libtirpc
9.9
CVSSv3
CVE-2016-9603
A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support prior to 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process insi...
Qemu QemuRedhat Enterprise Linux Desktop 7.0Citrix Xenserver 7.0Redhat Enterprise Linux Workstation 7.0Citrix Xenserver 7.1Redhat Openstack 5.0Redhat Enterprise Linux Server 7.0Redhat Openstack 7.0Citrix Xenserver 6.0.2Debian Debian Linux 7.0Citrix Xenserver 6.5Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Citrix Xenserver 6.2.0Redhat Enterprise Linux Workstation 6.0Redhat Openstack 6.0Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Eus 7.5Redhat Openstack 10
9.8
CVSSv3
CVE-2017-2640
An out-of-bounds write flaw was found in the way Pidgin prior to 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.
Pidgin PidginRedhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Eus 7.5Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Workstation 7.0Debian Debian Linux 8.0
7.4
CVSSv3
CVE-2017-12151
A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an malicious user to read or alter the...
Samba SambaRedhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Eus 7.5Redhat Enterprise Linux 7.0Redhat Enterprise Linux Server Aus 7.4Debian Debian Linux 9.0Redhat Enterprise Linux Desktop 7.0Debian Debian Linux 8.0Hp Cifs Server B.04.05.11.00
5.5
CVSSv3
CVE-2017-18344
The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel prior to 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). Th...
Linux Linux KernelCanonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server Tus 7.2Redhat Enterprise Linux Server Tus 7.4Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Tus 7.3Redhat Mrg Realtime 2.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Eus 7.5
7.5
CVSSv3
CVE-2016-9900
External resources that should be blocked when loaded by SVG images can bypass security restrictions through the use of "data:" URLs. This could allow for cross-domain data leakage. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird <...
Debian Debian Linux 9.0Redhat Enterprise Linux Server Eus 7.5Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux 5.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server 6.0Mozilla ThunderbirdMozilla FirefoxMozilla Firefox Esr
9.8
CVSSv3
CVE-2017-7793
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.
Debian Debian Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 9.0Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux 5.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.5Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server 7.0Mozilla ThunderbirdMozilla Firefox
9.8
CVSSv3
CVE-2017-7810
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 56, Firefox ESR...
Debian Debian Linux 8.0Debian Debian Linux 7.0Debian Debian Linux 9.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server Eus 7.5Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Workstation 7.0Canonical Ubuntu Linux 17.10Canonical Ubuntu Linux 18.04Mozilla FirefoxMozilla Firefox EsrMozilla Thunderbird
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook