Aller au contenu

Vulnérabilités connues pour Red Hat Enterprise Linux 7

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-56826 Openjpeg: heap buffer overflow in bin/common/color.c 5.6 Moyenne 9 janv. 2025
CVE-2024-52336 Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root 7.8 Élevée 26 nov. 2024
CVE-2024-52616 Avahi: avahi wide-area dns predictable transaction ids 5.3 Moyenne 21 nov. 2024
CVE-2024-52615 Avahi: avahi wide-area dns uses constant source port 5.3 Moyenne 21 nov. 2024
CVE-2023-39180 A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module 4.0 Moyenne 18 nov. 2024
CVE-2023-39179 A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module 7.5 Élevée 18 nov. 2024
CVE-2023-39176 A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module 5.8 Moyenne 18 nov. 2024
CVE-2020-25720 Samba: check attribute access rights for ldap adds of computers 7.5 Élevée 17 nov. 2024
CVE-2024-7730 A heap buffer overflow was found in the virtio-snd device in QEMU 7.4 Élevée 14 nov. 2024
CVE-2024-3447 A heap-based buffer overflow was found in the SDHCI device emulation of QEMU 6.0 Moyenne 14 nov. 2024
CVE-2023-4458 A flaw was found within the parsing of extended attributes in the kernel ksmbd module 4.0 Moyenne 14 nov. 2024
CVE-2023-4134 A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel 5.5 Moyenne 14 nov. 2024
CVE-2024-49395 Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block 5.3 Moyenne 12 nov. 2024
CVE-2024-49394 Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing 5.3 Moyenne 12 nov. 2024
CVE-2024-49393 Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing 6.5 Moyenne 12 nov. 2024
CVE-2024-10963 Pam: improper hostname interpretation in pam_access leads to access control bypass 7.4 Élevée 7 nov. 2024
CVE-2024-10573 Mpg123: buffer overflow when writing decoded pcm samples 6.7 Moyenne 31 oct. 2024
CVE-2024-9632 Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability 7.8 Élevée 30 oct. 2024
CVE-2024-10041 Pam: libpam: libpam vulnerable to read hashed password 4.7 Moyenne 23 oct. 2024
CVE-2024-6519 A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation 8.2 Élevée 21 oct. 2024
CVE-2024-9675 Buildah: buildah allows arbitrary directory mount 7.8 Élevée 9 oct. 2024
CVE-2024-9355 Golang-fips: golang fips zeroed buffer 6.5 Moyenne 1 oct. 2024
CVE-2024-8612 Qemu-kvm: information leak in virtio devices 3.8 Faible 20 sept. 2024
CVE-2024-8354 Qemu-kvm: usb: assertion failure in usb_ep_get() 5.5 Moyenne 19 sept. 2024
CVE-2024-45770 Pcp: pmpost symlink attack allows escalating pcp to root user 4.4 Moyenne 19 sept. 2024

Autres produits Red Hat