Known vulnerabilities in Red Hat Enterprise Linux 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2023-40661	Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process…	5.4 Medium	Nov 6, 2023
CVE-2023-40660	A flaw was found in OpenSC packages that allow a potential PIN bypass	6.6 Medium	Nov 6, 2023
CVE-2023-4535	An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key…	4.5 Medium	Nov 6, 2023
CVE-2023-5090	A flaw was found in KVM	6.0 Medium	Nov 6, 2023
CVE-2023-42669	A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC…	6.5 Medium	Nov 6, 2023
CVE-2023-5088	A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset…	6.4 Medium	Nov 3, 2023
CVE-2023-3961	A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain…	9.1 Critical	Nov 3, 2023
CVE-2023-46847	Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to…	8.6 High	Nov 3, 2023
CVE-2023-46848	Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP…	8.6 High	Nov 3, 2023
CVE-2023-42670	A flaw was found in Samba	6.5 Medium	Nov 3, 2023
CVE-2023-5824	Squid: dos against http and https	7.5 High	Nov 3, 2023
CVE-2023-4091	A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only…	6.5 Medium	Nov 3, 2023
CVE-2023-1194	An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel…	7.1 High	Nov 3, 2023
CVE-2022-4900	A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to…	6.2 Medium	Nov 2, 2023
CVE-2023-38473	A vulnerability was found in Avahi	6.2 Medium	Nov 2, 2023
CVE-2023-38472	A vulnerability was found in Avahi	6.2 Medium	Nov 2, 2023
CVE-2023-38471	A vulnerability was found in Avahi	6.2 Medium	Nov 2, 2023
CVE-2023-38470	A vulnerability was found in Avahi	6.2 Medium	Nov 2, 2023
CVE-2023-38469	A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record	6.2 Medium	Nov 2, 2023
CVE-2023-3164	A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and…	5.5 Medium	Nov 2, 2023
CVE-2023-1193	A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS…	6.5 Medium	Nov 1, 2023
CVE-2023-3397	A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in…	7.0 High	Nov 1, 2023
CVE-2023-1192	A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel	6.5 Medium	Nov 1, 2023
CVE-2023-5178	A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug…	8.8 High	Nov 1, 2023
CVE-2023-3972	A vulnerability was found in insights-client	7.8 High	Nov 1, 2023

Other Red Hat products