Known vulnerabilities in Red Hat Enterprise Linux 8
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-6246 | A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library | 8.4 High | Jan 31, 2024 |
| CVE-2023-5992 | Opensc: side-channel leaks while stripping encryption pkcs#1 padding | 5.6 Medium | Jan 31, 2024 |
| CVE-2024-0914 | Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin) | 5.9 Medium | Jan 31, 2024 |
| CVE-2024-0564 | Kernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplication | 5.3 Medium | Jan 30, 2024 |
| CVE-2023-40551 | A flaw was found in the MZ binary format in Shim | 5.1 Medium | Jan 29, 2024 |
| CVE-2023-40549 | An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE… | 6.2 Medium | Jan 29, 2024 |
| CVE-2023-40546 | A flaw was found in Shim when an error happened while creating a new ESL variable | 6.2 Medium | Jan 29, 2024 |
| CVE-2023-40550 | An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information | 5.5 Medium | Jan 29, 2024 |
| CVE-2023-40548 | A buffer overflow was found in Shim in the 32-bit system | 7.4 High | Jan 29, 2024 |
| CVE-2023-6200 | A race condition was found in the Linux Kernel | 7.5 High | Jan 28, 2024 |
| CVE-2024-0841 | Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function | 6.6 Medium | Jan 28, 2024 |
| CVE-2023-52356 | A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the… | 7.5 High | Jan 25, 2024 |
| CVE-2023-52355 | An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the… | 7.5 High | Jan 25, 2024 |
| CVE-2023-40547 | A remote code execution vulnerability was found in Shim | 8.3 High | Jan 25, 2024 |
| CVE-2023-39197 | An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel | 4.0 Medium | Jan 23, 2024 |
| CVE-2024-0775 | Kernel: use-after-free while changing the mount option in __ext4_remount leading | 6.7 Medium | Jan 22, 2024 |
| CVE-2023-6531 | Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf | 7.0 High | Jan 21, 2024 |
| CVE-2024-0607 | Kernel: nf_tables: pointer math issue in nft_byteorder_eval() | 6.6 Medium | Jan 18, 2024 |
| CVE-2024-0409 | Xorg-x11-server: selinux context corruption | 7.8 High | Jan 18, 2024 |
| CVE-2024-0408 | Xorg-x11-server: selinux unlabeled glx pbuffer | 5.5 Medium | Jan 18, 2024 |
| CVE-2023-6816 | Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer | 9.8 Critical | Jan 18, 2024 |
| CVE-2024-0646 | Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination | 7.0 High | Jan 17, 2024 |
| CVE-2024-0641 | Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke | 5.5 Medium | Jan 17, 2024 |
| CVE-2024-0639 | Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos | 5.5 Medium | Jan 17, 2024 |
| CVE-2024-0582 | Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap | 7.8 High | Jan 16, 2024 |
Other Red Hat products
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430