Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2023-6546	Kernel: gsm multiplexing race condition leads to privilege escalation	7.0 High	Dec 21, 2023
CVE-2023-6918	Libssh: missing checks for return values for digests	3.7 Low	Dec 18, 2023
CVE-2023-6228	Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c	3.3 Low	Dec 18, 2023
CVE-2023-47038	A vulnerability was found in perl 5.30.0 through 5.38.0	7.0 High	Dec 18, 2023
CVE-2023-6478	Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty	7.6 High	Dec 13, 2023
CVE-2023-6377	Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions	7.8 High	Dec 13, 2023
CVE-2023-6679	Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c	5.5 Medium	Dec 11, 2023
CVE-2023-5870	Postgresql: role pg_signal_backend can signal certain superuser processes.	2.2 Low	Dec 10, 2023
CVE-2023-5868	Postgresql: memory disclosure in aggregate function calls	4.3 Medium	Dec 10, 2023
CVE-2023-5869	Postgresql: buffer overrun from integer overflow in array modification	8.8 High	Dec 10, 2023
CVE-2023-6560	An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel	5.5 Medium	Dec 8, 2023
CVE-2023-6622	Kernel: null pointer dereference vulnerability in nft_dynset_init()	5.5 Medium	Dec 8, 2023
CVE-2023-6610	Kernel: oob access in smb2_dump_detail	7.1 High	Dec 8, 2023
CVE-2023-6606	Kernel: out-of-bounds read vulnerability in smbcalcsize	7.1 High	Dec 8, 2023
CVE-2023-5981	Gnutls: timing side-channel in the rsa-psk authentication	5.9 Medium	Nov 28, 2023
CVE-2023-5871	Libnbd: malicious nbd server may crash libnbd	5.3 Medium	Nov 27, 2023
CVE-2023-6277	Libtiff: out-of-memory in tiffopen via a craft file	6.5 Medium	Nov 24, 2023
CVE-2023-5972	A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel	7.0 High	Nov 23, 2023
CVE-2023-6238	A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel	6.7 Medium	Nov 21, 2023
CVE-2023-5341	Imagemagick: heap use-after-free in coders/bmp.c	6.2 Medium	Nov 19, 2023
CVE-2023-6176	Kernel: local dos vulnerability in scatterwalk_copychunks	4.7 Medium	Nov 16, 2023
CVE-2023-6121	Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get	4.3 Medium	Nov 16, 2023
CVE-2023-39198	A race condition was found in the QXL driver in the Linux kernel	7.5 High	Nov 9, 2023
CVE-2023-6039	A use-after-free flaw was found in lan78xx_disconnect in drivers/net/usb/lan78xx.c in the network sub-component,…	5.5 Medium	Nov 9, 2023
CVE-2023-4154	A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active…	7.5 High	Nov 7, 2023

Other Red Hat products