Vulnérabilités connues pour Red Hat Enterprise Linux 7

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2024-6239	Poppler: pdfinfo: crash in broken documents when using -dests parameter	7.5 Élevée	21 juin 2024
CVE-2024-5742	Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file	6.7 Moyenne	12 juin 2024
CVE-2024-3183	Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force	8.1 Élevée	12 juin 2024
CVE-2024-2698	A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition…	8.8 Élevée	12 juin 2024
CVE-2023-4727	A flaw was found in dogtag-pki and pki-core	7.5 Élevée	11 juin 2024
CVE-2024-3049	Booth: specially crafted hash can lead to invalid hmac being accepted by booth server	5.9 Moyenne	6 juin 2024
CVE-2024-3657	389-ds-base: potential denial of service via specially crafted kerberos as-req request	7.5 Élevée	28 mai 2024
CVE-2024-2199	389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c	5.7 Moyenne	28 mai 2024
CVE-2024-4693	Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash	5.5 Moyenne	10 mai 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 Élevée	9 mai 2024
CVE-2024-4418	Libvirt: stack use-after-free in virnetclientioeventloop()	6.2 Moyenne	8 mai 2024
CVE-2024-2467	Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)	5.9 Moyenne	25 avr. 2024
CVE-2023-3758	A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users	7.1 Élevée	18 avr. 2024
CVE-2024-1481	Freeipa: specially crafted http requests potentially lead to denial of service	5.3 Moyenne	10 avr. 2024
CVE-2024-3567	Qemu-kvm: net: assertion failure in update_sctp_checksum()	5.5 Moyenne	10 avr. 2024
CVE-2024-3446	A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the…	8.2 Élevée	9 avr. 2024
CVE-2024-31083	Xorg-x11-server: use-after-free in procrenderaddglyphs	7.8 Élevée	5 avr. 2024
CVE-2024-31082	Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap	7.3 Élevée	4 avr. 2024
CVE-2024-31081	Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice	7.3 Élevée	4 avr. 2024
CVE-2024-31080	Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents	7.3 Élevée	4 avr. 2024
CVE-2024-3094	Xz: malicious code in distributed source	10.0 Critique	29 mars 2024
CVE-2024-3019	Pcp: exposure of the redis server backend allows remote command execution via pmproxy	8.8 Élevée	28 mars 2024
CVE-2024-2947	Cockpit: command injection when deleting a sosreport with a crafted name	7.3 Élevée	28 mars 2024
CVE-2024-2494	Libvirt: negative g_new0 length can lead to unbounded memory allocation	6.2 Moyenne	21 mars 2024
CVE-2024-28834	A flaw was found in GnuTLS	5.3 Moyenne	21 mars 2024

Autres produits Red Hat