Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

redhat enterprise linux server workstation 7.0 vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv3

CVE-2024-1086

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can...
Linux Linux KernelLinux Linux Kernel 6.8Fedoraproject Fedora 39Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0 S390xRedhat Enterprise Linux For Power Big Endian 7.0 Ppc64Redhat Enterprise Linux For Power Little Endian 7.0 Ppc64leRedhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Debian Debian Linux 10.0Netapp A250 Firmware -Netapp 500f Firmware -
5.5
CVSSv3

CVE-2024-0408

A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access t...
Tigervnc TigervncX.org Xorg-serverX.org XwaylandFedoraproject Fedora 39Redhat Enterprise Linux 6.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Power Little Endian 7.0
7.8
CVSSv3

CVE-2024-0409

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.
Tigervnc TigervncX.org Xorg-serverX.org XwaylandFedoraproject Fedora 39Redhat Enterprise Linux 6.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Power Little Endian 7.0
9.8
CVSSv3

CVE-2023-6816

A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular num...
X.org Xorg-serverX.org XwaylandFedoraproject Fedora 39Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0Debian Debian Linux 10.0
6.5
CVSSv3

CVE-2023-5455

A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an malicious user to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and syst...
Freeipa FreeipaFreeipa Freeipa 4.11.0Fedoraproject Fedora 38Fedoraproject Fedora 39Fedoraproject Fedora 40Redhat Codeready Linux Builder -Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 8.4Redhat Enterprise Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Eus 8.6
8.8
CVSSv3

CVE-2023-5869

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overfl...
Postgresql PostgresqlPostgresql Postgresql 16.0Redhat Codeready Linux Builder Eus 9.2Redhat Codeready Linux Builder Eus For Power Little Endian Eus 9.0 Ppc64leRedhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder For Arm64 Eus 8.6 Aarch64Redhat Codeready Linux Builder For Arm64 Eus 9.0 Aarch64Redhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.0 S390xRedhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder For Power Little Endian Eus 9.0 Ppc64leRedhat Codeready Linux Builder For Power Little Endian Eus 9.2 Ppc64le
7.5
CVSSv3

CVE-2023-46847

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
Squid-cache SquidRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Arm 64 8.0 Aarch64Redhat Enterprise Linux For Ibm Z Systems 8.0 S390xRedhat Enterprise Linux For Power Little Endian 8.0 Ppc64leRedhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 8.2
7.8
CVSSv3

CVE-2023-5367

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrprope...
X.org X ServerX.org XwaylandRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0 S390xRedhat Enterprise Linux For Power Big Endian 7.0 Ppc64Redhat Enterprise Linux For Power Little Endian 7.0 Ppc64leRedhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0
7.8
CVSSv3

CVE-2023-3899

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.re...
Redhat Subscription-managerFedoraproject Fedora 37Fedoraproject Fedora 38Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Arm 64 8.0Redhat Enterprise Linux For Arm 64 9.0
7.8
CVSSv3

CVE-2023-0494

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where th...
X.org X ServerFedoraproject Fedora 36Fedoraproject Fedora 37Redhat Enterprise Linux 8.0Redhat Enterprise Linux 8.1Redhat Enterprise Linux 9.0Redhat Enterprise Linux Aus 8.4Redhat Enterprise Linux Aus 8.6Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux Eus 9.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
log injectionCVE-2024-42327CVE-2024-53691cameraCVE-2024-53810CVE-2024-41649logic flawCVE-2024-38921CVE-2024-41713
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook