Vulnerabilities of Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-0553	Gnutls: incomplete fix for cve-2023-5981	7.5 High	Jan 16, 2024
CVE-2024-0565	Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client	6.8 Medium	Jan 15, 2024
CVE-2024-0562	Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c	7.8 High	Jan 15, 2024
CVE-2023-5455	Ipa: invalid csrf protection	6.5 Medium	Jan 10, 2024
CVE-2023-7192	Kernel: refcount leak in ctnetlink_create_conntrack()	5.5 Medium	Jan 2, 2024
CVE-2023-4641	A flaw was found in shadow-utils	4.7 Medium	Dec 27, 2023
CVE-2023-6546	Kernel: gsm multiplexing race condition leads to privilege escalation	7.0 High	Dec 21, 2023
CVE-2023-6478	Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty	7.6 High	Dec 13, 2023
CVE-2023-6377	Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions	7.8 High	Dec 13, 2023
CVE-2023-5870	A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the…	2.2 Low	Dec 10, 2023
CVE-2023-5868	Postgresql: memory disclosure in aggregate function calls	4.3 Medium	Dec 10, 2023
CVE-2023-5869	Postgresql: buffer overrun from integer overflow in array modification	8.8 High	Dec 10, 2023
CVE-2023-6610	Kernel: oob access in smb2_dump_detail	7.1 High	Dec 8, 2023
CVE-2023-6606	Kernel: out-of-bounds read vulnerability in smbcalcsize	7.1 High	Dec 8, 2023
CVE-2023-5981	Gnutls: timing side-channel in the rsa-psk authentication	5.9 Medium	Nov 28, 2023
CVE-2023-42669	A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC…	6.5 Medium	Nov 6, 2023
CVE-2023-3961	A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain…	9.1 Critical	Nov 3, 2023
CVE-2023-46847	Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to…	8.6 High	Nov 3, 2023
CVE-2023-5824	Squid: dos against http and https	7.5 High	Nov 3, 2023
CVE-2023-4091	A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only…	6.5 Medium	Nov 3, 2023
CVE-2023-46846	SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform…	9.3 Critical	Nov 3, 2023
CVE-2023-5178	A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug…	8.8 High	Nov 1, 2023
CVE-2023-3972	A vulnerability was found in insights-client	7.8 High	Nov 1, 2023
CVE-2023-5367	Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty	7.8 High	Oct 25, 2023
CVE-2023-5557	Tracker-miners: sandbox escape	7.5 High	Oct 13, 2023

Other Red Hat products