Red Hat Red Hat Enterprise Linux 7

• CVE-2023-39327 Medium 4.3 Openjpeg: malicious files can cause the program to enter a large loop 0.6%
• CVE-2024-6501 Low 3.1 Networkmanager: denial of service 0.4%
• CVE-2024-6237 Medium 6.5 389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request 0.9%
• CVE-2023-39328 Medium 5.5 Openjpeg: denail of service via crafted image file 0.2%
• CVE-2024-6409 High 7.0 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9 27.9%
• CVE-2024-6505 Medium 6.8 Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss 0.7%
• CVE-2024-6126 Low 3.2 Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option 0.3%
• CVE-2024-4467 High 7.8 Qemu-kvm: 'qemu-img info' leads to host file read/write 0.3%
• CVE-2024-6387 High 8.1 Openssh: regresshion - race condition in ssh allows rce/dos 99.5%
• CVE-2024-6239 High 7.5 Poppler: pdfinfo: crash in broken documents when using -dests parameter 0.8%
• CVE-2024-5742 Medium 6.7 Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file 0.3%
• CVE-2024-3183 High 8.1 Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force 2.1%
• CVE-2024-2698 High 8.8 Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service 0.7%
• CVE-2023-4727 High 7.5 Ca: token authentication bypass vulnerability 0.7%
• CVE-2024-3049 Medium 5.9 Booth: specially crafted hash can lead to invalid hmac being accepted by booth server 0.5%
• CVE-2024-3657 High 7.5 389-ds-base: potential denial of service via specially crafted kerberos as-req request 1.3%
• CVE-2024-2199 Medium 5.7 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c 0.6%
• CVE-2024-4693 Medium 5.5 Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash 0.3%
• CVE-2024-4418 Medium 6.2 Libvirt: stack use-after-free in virnetclientioeventloop() 0.5%
• CVE-2024-2467 Medium 5.9 Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack) 0.5%
• CVE-2023-3758 High 7.1 Sssd: race condition during authorization leads to gpo policies functioning inconsistently 1.0%
• CVE-2024-1481 Medium 5.3 Freeipa: specially crafted http requests potentially lead to denial of service 1.1%
• CVE-2024-3567 Medium 5.5 Qemu-kvm: net: assertion failure in update_sctp_checksum() 0.4%
• CVE-2024-3446 High 8.2 Qemu: virtio: dma reentrancy issue leads to double free vulnerability 0.3%
• CVE-2024-31083 High 7.8 Xorg-x11-server: use-after-free in procrenderaddglyphs 1.9%
• CVE-2024-31082 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap 0.3%
• CVE-2024-31081 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice 0.5%
• CVE-2024-31080 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents 0.5%
• CVE-2024-3094 Critical 10.0 Xz: malicious code in distributed source 90.9%
• CVE-2024-3019 High 8.8 Pcp: exposure of the redis server backend allows remote command execution via pmproxy 1.1%
• CVE-2024-2947 High 7.3 Cockpit: command injection when deleting a sosreport with a crafted name 1.2%
• CVE-2024-2494 Medium 6.2 Libvirt: negative g_new0 length can lead to unbounded memory allocation 0.4%
• CVE-2024-28834 Medium 5.3 Gnutls: vulnerable to minerva side-channel information leak 0.7%
• CVE-2024-28835 Medium 5.0 Gnutls: potential crash during chain building/verification 0.4%
• CVE-2024-1753 High 8.6 Buildah: buildah: container escape via improper bind mount validation 0.5%
• CVE-2024-2496 Medium 5.0 Libvirt: null pointer dereference in udevconnectlistallinterfaces() 0.3%
• CVE-2024-2002 High 7.5 Libdwarf: crashes randomly on fuzzed object 1.1%
• CVE-2023-7250 Medium 5.3 Iperf3: possible denial of service 0.9%
• CVE-2024-1013 High 7.8 Unixodbc: out of bounds stack write due to pointer-to-integer types conversion 0.3%
• CVE-2024-1441 Medium 5.5 Libvirt: off-by-one error in udevlistinterfacesbystatus() 0.4%
• CVE-2024-2236 Medium 5.9 Libgcrypt: vulnerable to marvin attack 1.1%
• CVE-2023-6917 Medium 6.0 Pcp: unsafe use of directories allows pcp to root privilege escalation 0.2%
• CVE-2024-21886 High 7.8 Xorg-x11-server: heap buffer overflow in disabledevice 1.4%
• CVE-2024-21885 High 7.8 Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent 1.4%
• CVE-2023-3966 High 7.5 Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet 1.3%
• CVE-2024-1488 High 8.0 Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation 0.3%
• CVE-2024-1454 Low 3.4 Opensc: memory use after free in authentic driver when updating token info 0.4%
• CVE-2023-6681 Medium 5.3 Jwcrypto: denail of service via specifically crafted jwe 0.9%
• CVE-2024-1062 Medium 5.5 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) 0.3%
• CVE-2024-1151 Medium 5.5 Kernel: stack overflow problem in open vswitch kernel module leading to dos 0.3%