Vulnerabilities of Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-9675 | Buildah: buildah allows arbitrary directory mount | 7.8 High | Oct 9, 2024 |
| CVE-2024-3183 | Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force | 8.1 High | Jun 12, 2024 |
| CVE-2023-3758 | A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users | 7.1 High | Apr 18, 2024 |
| CVE-2024-31083 | Xorg-x11-server: use-after-free in procrenderaddglyphs | 7.8 High | Apr 5, 2024 |
| CVE-2024-31081 | Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice | 7.3 High | Apr 4, 2024 |
| CVE-2024-31080 | Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents | 7.3 High | Apr 4, 2024 |
| CVE-2024-3019 | Pcp: exposure of the redis server backend allows remote command execution via pmproxy | 8.8 High | Mar 28, 2024 |
| CVE-2024-1753 | Buildah: buildah: container escape via improper bind mount validation | 8.6 High | Mar 18, 2024 |
| CVE-2024-21886 | Xorg-x11-server: heap buffer overflow in disabledevice | 7.8 High | Feb 28, 2024 |
| CVE-2024-21885 | Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent | 7.8 High | Feb 28, 2024 |
| CVE-2024-1488 | Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation | 8.0 High | Feb 15, 2024 |
| CVE-2024-0229 | Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access | 7.8 High | Feb 9, 2024 |
| CVE-2023-6240 | Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation | 6.5 Medium | Feb 4, 2024 |
| CVE-2024-21626 | runc is a CLI tool for spawning and running containers on Linux according to the OCI specification | 8.6 High | Jan 31, 2024 |
| CVE-2023-40551 | A flaw was found in the MZ binary format in Shim | 5.1 Medium | Jan 29, 2024 |
| CVE-2023-40549 | An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE… | 6.2 Medium | Jan 29, 2024 |
| CVE-2023-40546 | A flaw was found in Shim when an error happened while creating a new ESL variable | 6.2 Medium | Jan 29, 2024 |
| CVE-2023-40550 | An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information | 5.5 Medium | Jan 29, 2024 |
| CVE-2023-40548 | A buffer overflow was found in Shim in the 32-bit system | 7.4 High | Jan 29, 2024 |
| CVE-2023-40547 | A remote code execution vulnerability was found in Shim | 8.3 High | Jan 25, 2024 |
| CVE-2023-6816 | Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer | 9.8 Critical | Jan 18, 2024 |
| CVE-2024-0646 | Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination | 7.0 High | Jan 17, 2024 |
| CVE-2023-4001 | An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the… | 6.8 Medium | Jan 15, 2024 |
| CVE-2023-5455 | Ipa: invalid csrf protection | 6.5 Medium | Jan 10, 2024 |
| CVE-2023-7192 | Kernel: refcount leak in ctnetlink_create_conntrack() | 5.5 Medium | Jan 2, 2024 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 450
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433