Red Hat Enterprise Linux 86 Advanced Mission Critical Update Support
Related 196slug: red-hat-enterprise-linux-86-advanced-mission-critical-update-support
Vulnerabilities related to Red Hat Enterprise Linux 86 Advanced Mission Critical Update Support 197
- High 7.6 Out-of-Bounds Write in grub2 CVE-2025-0624
- High 8.8 OS Command Injection in Emacs text editor CVE-2025-1244
- Medium 5.3 A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a... Vulnerability reported (CVE-2024-12133). Risk of unauthorized operations or information disclosure. CVE-2024-12133
- High 8.6 Privilege Escalation in podman build and buildah Vulnerability in podman build and buildah (CVE-2024-11218). Successful exploitation can lead to full system takeover. Exploitable via buildah.. CVE-2024-11218
- Medium 6.5 Path Traversal in Linux Samba CVE-2024-12087
- High 7.5 Vulnerability in Linux Samba CVE-2024-12085
- Medium 5.5 A log spoofing flaw was found in the Tuned package due to improper sanitization of some API... Vulnerability reported (CVE-2024-52337). Data can be tampered with by attackers. CVE-2024-52337
- High 7.8 Vulnerability in X.org server CVE-2024-9632
- High 7.8 Code Injection in libreswan client plugin for NetworkManager CVE-2024-9050
- High 7.8 Path Traversal in github.com/containers/buildah CVE-2024-9675
- Medium 6.5 Vulnerability in github.com/golang-fips/openssl CVE-2024-9355
- Medium 4.4 Pcp: pmpost symlink attack allows escalating pcp to root user A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges. CVE-2024-45770
- Medium 5.5 Pcp: pmcd heap corruption through metric pmstore operations A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash. CVE-2024-45769
- High 7.8 Out-of-Bounds Write in QEMU disk image utility (qemu-img) 'info' command CVE-2024-4467
- High 8.1 FreeIPAに認証情報を解読される脆弱性、ドメイン利用者のパスワードを推測されるおそれ 2024年6月に公表された、FreeIPAの脆弱性です。ユーザー権限を奪われた攻撃者が、Kerberosのチケットを手に入れてオフラインで総当たり攻撃を行い、ドメイン利用者のパスワードを割り出すおそれがあります。CVSSは8.1で、深刻度は高とされています。修正版の情報は確認できていないため、最新の情報を確認してください。 CVE-2024-3183
- High 7.5 Vulnerability in dogtag-pki and pki-core CVE-2023-4727
- High 8.1 libndpの脆弱性でバッファオーバーフローが起き、ローカルから悪用されるおそれ 2024年5月31日に公表された、libndpのバッファオーバーフローの脆弱性です。細工したIPv6ルーター通知パケットにより、NetworkManagerでバッファオーバーフローが起きるおそれがあり、CVSSv3の基本値は8.1です。1.0以上1.7-7未満の版が影響を受け、修正版は1.7-7です。修正版への更新を検討してください。 CVE-2024-5564