Known vulnerabilities in Red Hat Enterprise Linux 9

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2024-0553	Gnutls: incomplete fix for cve-2023-5981	7.5 High	Jan 16, 2024
CVE-2024-0565	Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client	6.8 Medium	Jan 15, 2024
CVE-2024-0562	Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c	7.8 High	Jan 15, 2024
CVE-2023-4001	An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the…	6.8 Medium	Jan 15, 2024
CVE-2023-6915	Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c	6.2 Medium	Jan 15, 2024
CVE-2023-6683	Qemu: vnc: null pointer dereference in qemu_clipboard_request()	6.5 Medium	Jan 12, 2024
CVE-2024-0443	Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.	5.5 Medium	Jan 11, 2024
CVE-2023-5455	Ipa: invalid csrf protection	6.5 Medium	Jan 10, 2024
CVE-2024-0340	Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()	4.4 Medium	Jan 9, 2024
CVE-2023-6270	Kernel: aoe: improper reference count leads to use-after-free vulnerability	7.0 High	Jan 4, 2024
CVE-2024-0217	Packagekitd: use-after-free in idle function callback	3.3 Low	Jan 3, 2024
CVE-2023-6004	Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname	4.8 Medium	Jan 3, 2024
CVE-2023-7192	Kernel: refcount leak in ctnetlink_create_conntrack()	5.5 Medium	Jan 2, 2024
CVE-2024-0193	Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation	7.8 High	Jan 2, 2024
CVE-2023-6693	Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()	4.9 Medium	Jan 2, 2024
CVE-2023-47039	A vulnerability was found in Perl	7.8 High	Jan 2, 2024
CVE-2023-4641	A flaw was found in shadow-utils	4.7 Medium	Dec 27, 2023
CVE-2023-7090	A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated…	6.6 Medium	Dec 23, 2023
CVE-2023-7008	A vulnerability was found in systemd-resolved	5.9 Medium	Dec 23, 2023
CVE-2023-7042	Kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()	4.4 Medium	Dec 21, 2023
CVE-2023-6546	Kernel: gsm multiplexing race condition leads to privilege escalation	7.0 High	Dec 21, 2023
CVE-2023-6918	Libssh: missing checks for return values for digests	3.7 Low	Dec 18, 2023
CVE-2023-6228	Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c	3.3 Low	Dec 18, 2023
CVE-2023-47038	A vulnerability was found in perl 5.30.0 through 5.38.0	7.0 High	Dec 18, 2023
CVE-2023-6478	Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty	7.6 High	Dec 13, 2023

Other Red Hat products