Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat enterprise linux 7.3 vulnerabilities and exploits

(subscribe to this query)
6.4
CVSSv2
CVE-2017-9788
In Apache httpd prior to 2.2.34 and 2.4.x prior to 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '...
Apache Http ServerDebian Debian Linux 8.0Debian Debian Linux 9.0Apple Mac Os XNetapp Storage Automation Store -Netapp Oncommand Unified Manager -Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server Tus 7.2Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Tus 7.4Redhat Enterprise Linux Server Eus 7.5
4.3
CVSSv2
CVE-2016-9591
JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer.
Jasper Project JasperRedhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Eus 7.3Debian Debian Linux 8.0
4.9
CVSSv2
CVE-2016-5403
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 16.04Oracle Linux 5Oracle Linux 6Oracle Linux 7Oracle Vm Server 3.4Qemu QemuQemu Qemu 2.7.0Debian Debian Linux 8.0Redhat Openstack 5.0Redhat Openstack 6.0Redhat Openstack 7.0Redhat Openstack 8Redhat Openstack 9Redhat Virtualization 3.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Server Aus 7.3
6.8
CVSSv2
CVE-2014-8129
LibTIFF 4.0.3 allows remote malicious users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that the BitsPerSample value is 2, and the t2p_sample_lab_signed_t...
Libtiff Libtiff 4.0.3Debian Debian Linux 7.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Server Tus 7.2Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Eus 7.4Apple Mac Os X 10.10.0Apple Mac Os X 10.10.1Apple Mac Os X 10.9.5Apple Mac Os X 10.10.3Apple Mac Os X 10.10.2Apple Mac Os X 10.8.5Apple Iphone Os -
9
CVSSv2
CVE-2016-9603
A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support prior to 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process insi...
Qemu QemuRedhat Enterprise Linux Desktop 7.0Citrix Xenserver 7.0Redhat Enterprise Linux Workstation 7.0Citrix Xenserver 7.1Redhat Openstack 5.0Redhat Enterprise Linux Server 7.0Redhat Openstack 7.0Citrix Xenserver 6.0.2Debian Debian Linux 7.0Citrix Xenserver 6.5Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Citrix Xenserver 6.2.0Redhat Enterprise Linux Workstation 6.0Redhat Openstack 6.0Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Eus 7.5Redhat Openstack 10
4
CVSSv2
CVE-2016-5440
Unspecified vulnerability in Oracle MySQL 5.5.49 and previous versions, 5.6.30 and previous versions, and 5.7.12 and previous versions and MariaDB prior to 5.5.50, 10.0.x prior to 10.0.26, and 10.1.x prior to 10.1.15 allows remote administrators to affect availability via vectors...
Ibm Powerkvm 3.1Ibm Powerkvm 2.1Mariadb MariadbOracle MysqlOracle Linux 7Debian Debian Linux 8.0Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Server Aus 7.6Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Eus 7.6Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Eus 7.2Redhat Enterprise Linux Server Tus 7.2Redhat Enterprise Linux Server Tus 7.6Redhat Enterprise Linux Server Eus 7.5Redhat Enterprise Linux Server Aus 7.2
10
CVSSv2
CVE-2011-2767
mod_perl 2.0 up to and including 2.0.10 allows malicious users to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP...
Apache Mod PerlDebian Debian Linux 8.0Redhat Enterprise Linux 7.4Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux 6.7Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux 7.3Redhat Enterprise Linux 7.5Redhat Enterprise Linux 7.6Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10
7.2
CVSSv2
CVE-2016-3710
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.
Debian Debian Linux 8.0Hp Helion Openstack 2.0.0Hp Helion Openstack 2.1.0Hp Helion Openstack 2.1.2Hp Helion Openstack 2.1.4Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 12.04Qemu QemuQemu Qemu 2.6.0Oracle Vm Server 3.2Oracle Vm Server 3.3Oracle Vm Server 3.4Oracle Linux 5Oracle Linux 6Oracle Linux 7Citrix XenserverRedhat Openstack 5.0Redhat Openstack 6.0Redhat Openstack 7.0Redhat Openstack 8
NA
CVE-2015-1931
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive...
Ibm Java SdkSuse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 11Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Workstation 7.0Redhat Satellite 5.7Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Eus 6.7Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Satellite 5.6Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Eus 7.5Redhat Enterprise Linux Eus 7.4Redhat Enterprise Linux Eus 7.3Redhat Enterprise Linux Eus 7.2Redhat Enterprise Linux Eus 7.1Redhat Enterprise Linux Workstation 6.0
9
CVSSv2
CVE-2019-14287
In Sudo prior to 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER=...
Sudo Project SudoFedoraproject Fedora 29Fedoraproject Fedora 30Fedoraproject Fedora 31Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.0Opensuse Leap 15.1Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Netapp Element Software Management Node -Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Server Aus 7.2Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server Tus 7.2Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 6.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32744privilege escalationCVE-2024-30253CVE-2024-3914cross-site scriptingCVE-2024-31497CVE-2024-3400CVE-2024-32341hardcoded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook