red hat red hat enterprise linux 6 vulnerabilities and exploits

(subscribe to this query)

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9

A flaw was found in the Emacs text editor. Improper handling of custom "man" URI schemes allows malicious users to execute arbitrary shell commands by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the malicious user to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service.

Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Storage 3

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying...

Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Openshift Container Platform 4

1 Github repository3 Articles

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such pack...

Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Openshift Container Platform 4

2 Github repositories3 Articles

A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.

Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Openshift Container Platform 4

A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote malicious user ...

Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Openshift Container Platform 4

A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buf...

Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Openshift Container Platform 4

2 Github repositories2 Articles

A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an malicious user to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized s...

Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Openshift Container Platform 4

2 Articles

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook