Vulnérabilités connues pour Red Hat Enterprise Linux 7
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2024-56826 | Openjpeg: heap buffer overflow in bin/common/color.c | 5.6 Moyenne | 9 janv. 2025 |
| CVE-2024-52336 | Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root | 7.8 Élevée | 26 nov. 2024 |
| CVE-2024-52616 | Avahi: avahi wide-area dns predictable transaction ids | 5.3 Moyenne | 21 nov. 2024 |
| CVE-2024-52615 | Avahi: avahi wide-area dns uses constant source port | 5.3 Moyenne | 21 nov. 2024 |
| CVE-2023-39180 | A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module | 4.0 Moyenne | 18 nov. 2024 |
| CVE-2023-39179 | A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module | 7.5 Élevée | 18 nov. 2024 |
| CVE-2023-39176 | A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module | 5.8 Moyenne | 18 nov. 2024 |
| CVE-2020-25720 | Samba: check attribute access rights for ldap adds of computers | 7.5 Élevée | 17 nov. 2024 |
| CVE-2024-7730 | A heap buffer overflow was found in the virtio-snd device in QEMU | 7.4 Élevée | 14 nov. 2024 |
| CVE-2024-3447 | A heap-based buffer overflow was found in the SDHCI device emulation of QEMU | 6.0 Moyenne | 14 nov. 2024 |
| CVE-2023-4458 | A flaw was found within the parsing of extended attributes in the kernel ksmbd module | 4.0 Moyenne | 14 nov. 2024 |
| CVE-2023-4134 | A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel | 5.5 Moyenne | 14 nov. 2024 |
| CVE-2024-49395 | Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block | 5.3 Moyenne | 12 nov. 2024 |
| CVE-2024-49394 | Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing | 5.3 Moyenne | 12 nov. 2024 |
| CVE-2024-49393 | Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing | 6.5 Moyenne | 12 nov. 2024 |
| CVE-2024-10963 | Pam: improper hostname interpretation in pam_access leads to access control bypass | 7.4 Élevée | 7 nov. 2024 |
| CVE-2024-10573 | Mpg123: buffer overflow when writing decoded pcm samples | 6.7 Moyenne | 31 oct. 2024 |
| CVE-2024-9632 | Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability | 7.8 Élevée | 30 oct. 2024 |
| CVE-2024-10041 | Pam: libpam: libpam vulnerable to read hashed password | 4.7 Moyenne | 23 oct. 2024 |
| CVE-2024-6519 | A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation | 8.2 Élevée | 21 oct. 2024 |
| CVE-2024-9675 | Buildah: buildah allows arbitrary directory mount | 7.8 Élevée | 9 oct. 2024 |
| CVE-2024-9355 | Golang-fips: golang fips zeroed buffer | 6.5 Moyenne | 1 oct. 2024 |
| CVE-2024-8612 | Qemu-kvm: information leak in virtio devices | 3.8 Faible | 20 sept. 2024 |
| CVE-2024-8354 | Qemu-kvm: usb: assertion failure in usb_ep_get() | 5.5 Moyenne | 19 sept. 2024 |
| CVE-2024-45770 | Pcp: pmpost symlink attack allows escalating pcp to root user | 4.4 Moyenne | 19 sept. 2024 |
Autres produits Red Hat
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 430