Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-1441	Libvirt: off-by-one error in udevlistinterfacesbystatus()	5.5 Medium	Mar 11, 2024
CVE-2024-2236	Libgcrypt: vulnerable to marvin attack	5.9 Medium	Mar 6, 2024
CVE-2023-6917	Pcp: unsafe use of directories allows pcp to root privilege escalation	6.0 Medium	Feb 28, 2024
CVE-2024-21886	Xorg-x11-server: heap buffer overflow in disabledevice	7.8 High	Feb 28, 2024
CVE-2024-21885	Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent	7.8 High	Feb 28, 2024
CVE-2024-1488	Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation	8.0 High	Feb 15, 2024
CVE-2024-1454	Opensc: memory use after free in authentic driver when updating token info	3.4 Low	Feb 12, 2024
CVE-2023-6681	Jwcrypto: denail of service via specifically crafted jwe	5.3 Medium	Feb 12, 2024
CVE-2024-1062	389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)	5.5 Medium	Feb 12, 2024
CVE-2024-1151	Kernel: stack overflow problem in open vswitch kernel module leading to dos	5.5 Medium	Feb 11, 2024
CVE-2024-0229	Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access	7.8 High	Feb 9, 2024
CVE-2024-1312	A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same…	5.1 Medium	Feb 8, 2024
CVE-2023-6536	Kernel: null pointer dereference in __nvmet_req_complete	6.5 Medium	Feb 7, 2024
CVE-2023-6535	Kernel: null pointer dereference in nvmet_tcp_execute_request	6.5 Medium	Feb 7, 2024
CVE-2023-6356	Kernel: null pointer dereference in nvmet_tcp_build_iovec	6.5 Medium	Feb 7, 2024
CVE-2024-1048	Grub2: grub2-set-bootflag can be abused by local (pseudo-)users	3.3 Low	Feb 6, 2024
CVE-2024-0690	Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration	5.0 Medium	Feb 6, 2024
CVE-2023-50782	A flaw was found in the python-cryptography package	7.5 High	Feb 5, 2024
CVE-2023-50781	A flaw was found in m2crypto	7.5 High	Feb 5, 2024
CVE-2023-7216	Cpio: extraction allows symlinks which enables remote command execution	5.3 Medium	Feb 5, 2024
CVE-2023-6240	Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation	6.5 Medium	Feb 4, 2024
CVE-2024-21626	runc is a CLI tool for spawning and running containers on Linux according to the OCI specification	8.6 High	Jan 31, 2024
CVE-2023-6780	An integer overflow was found in the __vsyslog_internal function of the glibc library	5.3 Medium	Jan 31, 2024
CVE-2023-6779	An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library	8.2 High	Jan 31, 2024
CVE-2023-6246	A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library	8.4 High	Jan 31, 2024

Other Red Hat products