Skip to content

Vulnerabilities of Red Hat Red Hat Enterprise Linux 9

Is your version affected?

CVE Summary Score Published
CVE-2023-3961 A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain… 9.1 Critical Nov 3, 2023
CVE-2023-46847 Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to… 8.6 High Nov 3, 2023
CVE-2023-46848 Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP… 8.6 High Nov 3, 2023
CVE-2023-42670 A flaw was found in Samba 6.5 Medium Nov 3, 2023
CVE-2023-5824 Squid: dos against http and https 7.5 High Nov 3, 2023
CVE-2023-4091 A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only… 6.5 Medium Nov 3, 2023
CVE-2023-1194 An out-of-bounds (OOB) memory read flaw was found in parse_lease_state in the KSMBD implementation of the in-kernel… 7.1 High Nov 3, 2023
CVE-2023-46846 SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform… 9.3 Critical Nov 3, 2023
CVE-2022-4900 A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to… 6.2 Medium Nov 2, 2023
CVE-2023-38473 A vulnerability was found in Avahi 6.2 Medium Nov 2, 2023
CVE-2023-38472 A vulnerability was found in Avahi 6.2 Medium Nov 2, 2023
CVE-2023-38471 A vulnerability was found in Avahi 6.2 Medium Nov 2, 2023
CVE-2023-38470 A vulnerability was found in Avahi 6.2 Medium Nov 2, 2023
CVE-2023-38469 A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record 6.2 Medium Nov 2, 2023
CVE-2023-3164 A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and… 5.5 Medium Nov 2, 2023
CVE-2023-1193 A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS… 6.5 Medium Nov 1, 2023
CVE-2023-3397 A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in… 7.0 High Nov 1, 2023
CVE-2023-1192 A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel 6.5 Medium Nov 1, 2023
CVE-2023-5178 A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug… 8.8 High Nov 1, 2023
CVE-2023-3972 A vulnerability was found in insights-client 7.8 High Nov 1, 2023
CVE-2023-5574 Xorg-x11-server: use-after-free bug in damagedestroy 7.0 High Oct 25, 2023
CVE-2023-5380 Xorg-x11-server: use-after-free bug in destroywindow 4.7 Medium Oct 25, 2023
CVE-2023-5367 Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty 7.8 High Oct 25, 2023
CVE-2023-4693 An out-of-bounds read flaw was found on grub2's NTFS filesystem driver 5.3 Medium Oct 25, 2023
CVE-2023-4692 An out-of-bounds write flaw was found in grub2's NTFS filesystem driver 7.5 High Oct 25, 2023

Other Red Hat products