Red Hat Enterprise Linux 92 Extended Update Support
Related 106slug: red-hat-enterprise-linux-92-extended-update-support
Vulnerabilities related to Red Hat Enterprise Linux 92 Extended Update Support 106
- High 7.8 Xorg-x11-serverに脆弱性、SSH X11転送環境で遠隔からコードを実行されるおそれ 2024年2月に公表された、X.Org serverのDisableDevice関数におけるヒープバッファオーバーフローの脆弱性です。アプリケーションがクラッシュするほか、SSH X11転送の環境では遠隔からコードを実行されるおそれがあります。修正版の情報は事実に含まれていないため、最新の情報を確認してください。 CVE-2024-21886
- High 7.8 Vulnerability in X.Org server CVE-2024-21885
- High 8.0 Vulnerability in Unbound due to incorrect default permissions CVE-2024-1488
- Medium 5.5 Vulnerability in 389-ds-base CVE-2024-1062
- Medium 5.5 Kernel: stack overflow problem in open vswitch kernel module leading to dos A vulnerability was reported in the Open vSwitch sub-component in the Linux Kernel. The flaw occurs when a recursive operation of code push recursively calls into the code block. The OVS module does not validate the stack depth, pushing too many frames and causing a stack overflow. As a result, this... CVE-2024-1151
- High 7.8 Out-of-Bounds Write in Xorg-x11-server CVE-2024-0229
- Medium 6.5 Kernel: null pointer dereference in __nvmet_req_complete A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service. CVE-2023-6536
- Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_execute_request A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service. CVE-2023-6535
- Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_build_iovec A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service. CVE-2023-6356
- Medium 6.5 Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key. CVE-2023-6240
- Medium 5.9 Vulnerability in Opencryptoki CVE-2024-0914
- Critical 9.8 Xorg-x11-serverにヒープバッファオーバーフローの脆弱性、特権昇格や任意コード実行のおそれ 2024年1月に公表された古いCVEです。X.Org Serverでは、DeviceFocusEventとXIQueryPointerの応答でボタン状態を確認する際に、割り当て領域を超えて書き込まれるヒープバッファオーバーフローが起きます。CVSSは9.8で、深刻度は緊急です。修正版の情報は本記事の事実に含まれていないため、最新の情報を確認してください。 CVE-2023-6816
- High 7.0 Out-of-Bounds Write in Linux Kernel CVE-2024-0646
- High 7.5 Vulnerability in GnuTLS CVE-2024-0567
- High 7.5 Vulnerability in GnuTLS CVE-2024-0553
- Medium 6.8 Vulnerability in Linux Kernel CVE-2024-0565
- Medium 6.8 Grub2: bypass the grub password protection feature An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a file s... CVE-2023-4001
- Medium 5.5 Vulnerability in Linux kernel CVE-2024-0443
- Medium 6.5 Cross-Site Request Forgery (CSRF) in Ipa Vulnerability in Ipa (CVE-2023-5455). Data can be tampered with by attackers. CVE-2023-5455
- Medium 5.5 Kernel: refcount leak in ctnetlink_create_conntrack() A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow. CVE-2023-7192
- High 7.8 Use-After-Free in Codeready Linux Builder For Ibm Z Systems Eus Vulnerability in Codeready Linux Builder For Ibm Z Systems Eus (CVE-2024-0193). Successful exploitation can lead to full system takeover. CVE-2024-0193
- High 7.0 Vulnerability in Linux Kernel CVE-2023-6546
- High 7.6 Vulnerability in xorg-server CVE-2023-6478
- High 7.8 Out-of-Bounds Read in xorg-server Vulnerability in xorg-server (CVE-2023-6377). Successful exploitation can lead to full system takeover. CVE-2023-6377
- Medium 5.5 Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service. CVE-2023-6679
- Medium 4.3 Vulnerability in Codeready Linux Builder Eus CVE-2023-5868
- High 7.1 Out-of-Bounds Read in Linux Kernel Vulnerability in Linux Kernel (CVE-2023-6606). Confidential information can be exposed externally. CVE-2023-6606
- High 7.1 Out-of-Bounds Read in Linux Kernel Vulnerability in Linux Kernel (CVE-2023-6610). Confidential information can be exposed externally. CVE-2023-6610
- Medium 5.9 Vulnerability in RSA-PSK CVE-2023-5981
- Medium 6.0 Vulnerability in KVM CVE-2023-5090