Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2023-6816	Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer	9.8 Critical	Jan 18, 2024
CVE-2024-0646	Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination	7.0 High	Jan 17, 2024
CVE-2024-0641	Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke	5.5 Medium	Jan 17, 2024
CVE-2024-0639	Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos	5.5 Medium	Jan 17, 2024
CVE-2024-0582	Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap	7.8 High	Jan 16, 2024
CVE-2024-0567	Gnutls: rejects certificate chain with distributed trust	7.5 High	Jan 16, 2024
CVE-2024-0232	Sqlite: use-after-free bug in jsonparseaddnodearray	4.7 Medium	Jan 16, 2024
CVE-2024-0553	Gnutls: incomplete fix for cve-2023-5981	7.5 High	Jan 16, 2024
CVE-2024-0565	Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client	6.8 Medium	Jan 15, 2024
CVE-2024-0562	Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c	7.8 High	Jan 15, 2024
CVE-2023-6915	Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c	6.2 Medium	Jan 15, 2024
CVE-2023-6683	Qemu: vnc: null pointer dereference in qemu_clipboard_request()	6.5 Medium	Jan 12, 2024
CVE-2024-0443	Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.	5.5 Medium	Jan 11, 2024
CVE-2023-5455	Ipa: invalid csrf protection	6.5 Medium	Jan 10, 2024
CVE-2024-0340	Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()	4.4 Medium	Jan 9, 2024
CVE-2023-6270	Kernel: aoe: improper reference count leads to use-after-free vulnerability	7.0 High	Jan 4, 2024
CVE-2024-0217	Packagekitd: use-after-free in idle function callback	3.3 Low	Jan 3, 2024
CVE-2023-6004	Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname	4.8 Medium	Jan 3, 2024
CVE-2023-7192	Kernel: refcount leak in ctnetlink_create_conntrack()	5.5 Medium	Jan 2, 2024
CVE-2024-0193	Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation	7.8 High	Jan 2, 2024
CVE-2023-6693	Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()	4.9 Medium	Jan 2, 2024
CVE-2023-47039	A vulnerability was found in Perl	7.8 High	Jan 2, 2024
CVE-2023-4641	A flaw was found in shadow-utils	4.7 Medium	Dec 27, 2023
CVE-2023-7090	A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated…	6.6 Medium	Dec 23, 2023
CVE-2023-7042	Kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()	4.4 Medium	Dec 21, 2023

Other Red Hat products