Red Hat Red Hat Enterprise Linux 7

• CVE-2023-29499 Medium 5.5 Gvariant offset table entry size is not checked in is_normal() 0.8%
• CVE-2023-32665 Medium 5.5 Gvariant deserialisation does not match spec for non-normal data 0.4%
• CVE-2023-2680 High 7.5 Dma reentrancy issue (incomplete fix for cve-2021-3750) 0.2%
• CVE-2023-3255 Medium 6.5 Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service 1.9%
• CVE-2023-4155 Medium 5.3 Sev-es / sev-snp vmgexit double fetch vulnerability 0.2%
• CVE-2023-3301 Medium 5.6 Triggerable assertion due to race condition in hot-unplug 0.3%
• CVE-2023-4813 Medium 5.9 Glibc: potential use-after-free in gaih_inet() 1.9%
• CVE-2023-4611 High 7.0 Use after free race between mbind() and vma-locked page fault 0.3%
• CVE-2023-4569 Medium 5.5 Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c 0.3%
• CVE-2023-4042 Medium 5.5 Ghostscript: incomplete fix for cve-2020-16305 0.3%
• CVE-2023-3899 High 7.8 Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration 0.2%
• CVE-2023-4459 Medium 5.5 Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup() 0.2%
• CVE-2023-4394 Medium 6.7 Memory leak in btrfs_get_dev_args_from_path() 0.2%
• CVE-2023-4389 High 7.0 Kernel: btrfs: double free in btrfs_get_root_ref() 0.3%
• CVE-2023-4387 High 7.1 Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf() 0.2%
• CVE-2023-4385 Medium 5.5 Kernel: jfs: null pointer dereference in dbfree() 0.2%
• CVE-2023-39418 Low 3.1 Postgresql: merge fails to enforce update or select row security policies 1.1%
• CVE-2023-39417 High 7.5 Postgresql: extension script @substitutions@ within quoting allow sql injection 1.7%
• CVE-2023-4273 Medium 6.0 Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry 0.6%
• CVE-2023-4194 Medium 5.5 Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid 0.3%
• CVE-2023-4147 High 7.8 Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free 0.6%
• CVE-2023-4135 Medium 6.0 Out-of-bounds read information disclosure vulnerability 0.4%
• CVE-2023-4132 Medium 5.5 Kernel: smsusb: use-after-free caused by do_submit_urb() 0.3%
• CVE-2023-4133 Medium 5.5 Kernel: cxgb4: use-after-free in ch_flower_stats_cb() 0.2%
• CVE-2023-3180 Medium 6.0 Heap buffer overflow in virtio_crypto_sym_op_helper() 0.2%
• CVE-2023-38560 Medium 5.5 Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name 0.3%
• CVE-2023-38559 Medium 5.5 Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos 0.4%
• CVE-2023-4004 High 7.8 Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() 0.9%
• CVE-2023-3773 Medium 5.5 Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr 0.3%
• CVE-2023-3772 Medium 5.5 Kernel: xfrm: null pointer dereference in xfrm_update_ae_params() 0.5%
• CVE-2023-3640 High 7.0 Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space 0.8%
• CVE-2023-32248 High 7.5 Tree connection null pointer dereference denial-of-service vulnerability 4.1%
• CVE-2023-32257 High 8.1 Session race condition remote code execution vulnerability 2.4%
• CVE-2023-32252 High 7.5 Session null pointer dereference denial-of-service vulnerability 4.1%
• CVE-2023-32258 High 8.1 Session race condition remote code execution vulnerability 2.5%
• CVE-2023-1386 Low 3.3 Qemu: 9pfs: suid/sgid bits not dropped on file write 0.2%
• CVE-2023-33951 Medium 6.7 Kernel: vmwgfx: race condition leading to information disclosure vulnerability 0.3%
• CVE-2023-32247 High 7.5 Session setup memory exhaustion denial-of-service vulnerability 3.9%
• CVE-2023-3745 Medium 5.5 Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h 0.5%
• CVE-2023-3750 Medium 6.5 Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service 0.8%
• CVE-2023-3812 High 7.8 Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags 0.3%
• CVE-2023-3019 Medium 6.0 Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() 0.3%
• CVE-2023-3567 High 7.1 Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race 0.4%
• CVE-2023-33952 Medium 6.7 Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects 0.5%
• CVE-2023-2860 Medium 4.4 Out-of-bounds read when setting hmac data 0.3%
• CVE-2023-3863 Medium 6.4 Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c 0.2%
• CVE-2023-3603 Low 3.1 Processing sftp server read may cause null dereference 0.9%
• CVE-2023-34968 Medium 5.3 Samba: spotlight server-side share path disclosure 1.3%
• CVE-2023-34967 Medium 5.3 Samba: type confusion in mdssvc rpc service for spotlight 61.2%
• CVE-2023-34966 High 7.5 Samba: infinite loop in mdssvc rpc service for spotlight 62.4%