Vulnerabilities of Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2023-6546	Kernel: gsm multiplexing race condition leads to privilege escalation	7.0 High	Dec 21, 2023
CVE-2023-6478	Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty	7.6 High	Dec 13, 2023
CVE-2023-6377	Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions	7.8 High	Dec 13, 2023
CVE-2023-5870	A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the…	2.2 Low	Dec 10, 2023
CVE-2023-5868	Postgresql: memory disclosure in aggregate function calls	4.3 Medium	Dec 10, 2023
CVE-2023-5869	Postgresql: buffer overrun from integer overflow in array modification	8.8 High	Dec 10, 2023
CVE-2023-42669	A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC…	6.5 Medium	Nov 6, 2023
CVE-2023-3961	A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain…	9.1 Critical	Nov 3, 2023
CVE-2023-46847	Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to…	8.6 High	Nov 3, 2023
CVE-2023-46848	Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP…	8.6 High	Nov 3, 2023
CVE-2023-5824	Squid: dos against http and https	7.5 High	Nov 3, 2023
CVE-2023-4091	A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only…	6.5 Medium	Nov 3, 2023
CVE-2023-46846	SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform…	9.3 Critical	Nov 3, 2023
CVE-2023-5178	A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug…	8.8 High	Nov 1, 2023
CVE-2023-3972	A vulnerability was found in insights-client	7.8 High	Nov 1, 2023
CVE-2023-5367	Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty	7.8 High	Oct 25, 2023
CVE-2023-5557	Tracker-miners: sandbox escape	7.5 High	Oct 13, 2023
CVE-2023-4911	Exploited GNU C Library Buffer Overflow Vulnerability	7.8 High	Oct 3, 2023
CVE-2023-5157	A vulnerability was found in MariaDB	7.5 High	Sep 26, 2023
CVE-2023-42753	An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel	7.0 High	Sep 25, 2023
CVE-2023-3899	A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization	7.8 High	Aug 23, 2023
CVE-2023-4459	A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking…	5.5 Medium	Aug 21, 2023
CVE-2023-39417	IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or…	7.5 High	Aug 11, 2023
CVE-2023-4147	A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID	7.8 High	Aug 7, 2023
CVE-2023-4004	A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove…	7.8 High	Jul 31, 2023

Other Red Hat products