Red Hat Red Hat Enterprise Linux 7

• CVE-2024-0229 High 7.8 Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access 1.2%
• CVE-2024-1312 Medium 5.1 Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu 0.2%
• CVE-2023-6536 Medium 6.5 Kernel: null pointer dereference in __nvmet_req_complete 1.5%
• CVE-2023-6535 Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_execute_request 1.5%
• CVE-2023-6356 Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_build_iovec 1.5%
• CVE-2024-1048 Low 3.3 Grub2: grub2-set-bootflag can be abused by local (pseudo-)users 0.3%
• CVE-2023-50782 High 7.5 Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 1.1%
• CVE-2023-50781 High 7.5 M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657 1.1%
• CVE-2023-7216 Medium 5.3 Cpio: extraction allows symlinks which enables remote command execution 0.9%
• CVE-2023-6240 Medium 6.5 Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation 1.0%
• CVE-2023-6780 Medium 5.3 Glibc: integer overflow in __vsyslog_internal() 2.7%
• CVE-2023-6779 High 8.2 Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() 3.2%
• CVE-2023-6246 High 8.4 Glibc: heap-based buffer overflow in __vsyslog_internal() 4.8%
• CVE-2023-5992 Medium 5.6 Opensc: side-channel leaks while stripping encryption pkcs#1 padding 1.2%
• CVE-2024-0914 Medium 5.9 Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin) 0.9%
• CVE-2024-0564 Medium 5.3 Kernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplication 0.6%
• CVE-2023-40551 Medium 5.1 Shim: out of bounds read when parsing mz binaries 0.4%
• CVE-2023-40546 Medium 6.2 Shim: out-of-bounds read printing error messages 0.4%
• CVE-2023-40549 Medium 6.2 Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file 0.4%
• CVE-2023-40550 Medium 5.5 Shim: out-of-bound read in verify_buffer_sbat() 0.4%
• CVE-2023-40548 High 7.4 Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems 0.4%
• CVE-2023-6200 High 7.5 Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability 2.0%
• CVE-2024-0841 Medium 6.6 Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function 0.3%
• CVE-2023-52356 High 7.5 Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service 2.5%
• CVE-2023-52355 High 7.5 Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom 1.8%
• CVE-2023-40547 High 8.3 Shim: rce in http boot support may lead to secure boot bypass 5.4%
• CVE-2023-39197 Medium 4.0 Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet() 1.0%
• CVE-2024-0775 Medium 6.7 Kernel: use-after-free while changing the mount option in __ext4_remount leading 0.2%
• CVE-2023-6531 High 7.0 Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf 0.2%
• CVE-2024-0607 Medium 6.6 Kernel: nf_tables: pointer math issue in nft_byteorder_eval() 0.3%
• CVE-2024-0409 High 7.8 Xorg-x11-server: selinux context corruption 0.4%
• CVE-2024-0408 Medium 5.5 Xorg-x11-server: selinux unlabeled glx pbuffer 0.3%
• CVE-2023-6816 Critical 9.8 Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer 2.1%
• CVE-2024-0646 High 7.0 Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination 0.3%
• CVE-2024-0641 Medium 5.5 Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke 0.2%
• CVE-2024-0639 Medium 5.5 Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos 0.2%
• CVE-2024-0582 High 7.8 Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap 12.8%
• CVE-2024-0567 High 7.5 Gnutls: rejects certificate chain with distributed trust 1.4%
• CVE-2024-0232 Medium 4.7 Sqlite: use-after-free bug in jsonparseaddnodearray 0.4%
• CVE-2024-0553 High 7.5 Gnutls: incomplete fix for cve-2023-5981 1.6%
• CVE-2024-0565 Medium 6.8 Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client 2.0%
• CVE-2024-0562 High 7.8 Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c 0.3%
• CVE-2023-6915 Medium 6.2 Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c 0.3%
• CVE-2023-6683 Medium 6.5 Qemu: vnc: null pointer dereference in qemu_clipboard_request() 1.3%
• CVE-2024-0443 Medium 5.5 Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline. 0.2%
• CVE-2023-5455 Medium 6.5 Ipa: invalid csrf protection 0.6%
• CVE-2024-0340 Medium 4.4 Kernel: information disclosure in vhost/vhost.c:vhost_new_msg() 0.2%
• CVE-2023-6270 High 7.0 Kernel: aoe: improper reference count leads to use-after-free vulnerability 0.4%
• CVE-2024-0217 Low 3.3 Packagekitd: use-after-free in idle function callback 0.2%
• CVE-2023-6004 Medium 4.8 Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname 0.4%