Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads	7.5 High	Mar 21, 2024
CVE-2024-28835	A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially…	5.0 Medium	Mar 21, 2024
CVE-2024-1753	Buildah: buildah: container escape via improper bind mount validation	8.6 High	Mar 18, 2024
CVE-2024-2496	Libvirt: null pointer dereference in udevconnectlistallinterfaces()	5.0 Medium	Mar 18, 2024
CVE-2024-2002	Libdwarf: crashes randomly on fuzzed object	7.5 High	Mar 18, 2024
CVE-2023-7250	Iperf3: possible denial of service	5.3 Medium	Mar 18, 2024
CVE-2024-1013	Unixodbc: out of bounds stack write due to pointer-to-integer types conversion	7.8 High	Mar 18, 2024
CVE-2024-1441	Libvirt: off-by-one error in udevlistinterfacesbystatus()	5.5 Medium	Mar 11, 2024
CVE-2024-2236	Libgcrypt: vulnerable to marvin attack	5.9 Medium	Mar 6, 2024
CVE-2023-6917	Pcp: unsafe use of directories allows pcp to root privilege escalation	6.0 Medium	Feb 28, 2024
CVE-2024-21886	Xorg-x11-server: heap buffer overflow in disabledevice	7.8 High	Feb 28, 2024
CVE-2024-21885	Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent	7.8 High	Feb 28, 2024
CVE-2023-3966	A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a…	7.5 High	Feb 22, 2024
CVE-2024-1488	Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation	8.0 High	Feb 15, 2024
CVE-2024-1454	Opensc: memory use after free in authentic driver when updating token info	3.4 Low	Feb 12, 2024
CVE-2023-6681	Jwcrypto: denail of service via specifically crafted jwe	5.3 Medium	Feb 12, 2024
CVE-2024-1062	389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)	5.5 Medium	Feb 12, 2024
CVE-2024-1151	Kernel: stack overflow problem in open vswitch kernel module leading to dos	5.5 Medium	Feb 11, 2024
CVE-2024-0229	Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access	7.8 High	Feb 9, 2024
CVE-2024-1312	A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same…	5.1 Medium	Feb 8, 2024
CVE-2023-6536	Kernel: null pointer dereference in __nvmet_req_complete	6.5 Medium	Feb 7, 2024
CVE-2023-6535	Kernel: null pointer dereference in nvmet_tcp_execute_request	6.5 Medium	Feb 7, 2024
CVE-2023-6356	Kernel: null pointer dereference in nvmet_tcp_build_iovec	6.5 Medium	Feb 7, 2024
CVE-2024-1048	Grub2: grub2-set-bootflag can be abused by local (pseudo-)users	3.3 Low	Feb 6, 2024
CVE-2023-50782	A flaw was found in the python-cryptography package	7.5 High	Feb 5, 2024

Other Red Hat products