Red Hat Red Hat Enterprise Linux 7

• CVE-2023-3347 Medium 5.9 Samba: smb2 packet signing is not enforced when "server signing = required" is set 0.4%
• CVE-2022-2127 Medium 5.9 Samba: out-of-bounds read in winbind auth_crap 1.7%
• CVE-2023-0160 Medium 4.7 Possibility of deadlock in libbpf function sock_hash_delete_elem 0.3%
• CVE-2023-3618 Medium 6.5 Segmentation fault in fax3encode in libtiff/tif_fax3.c 1.2%
• CVE-2023-3106 Medium 6.6 Kernel: netlink socket crash (null pointer deref) in netlink_dump function 0.3%
• CVE-2023-3354 High 7.5 Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service 1.6%
• CVE-2023-3108 Medium 6.2 Kernel: a race condition in crypto module in the function skcipher_recvmsg 0.2%
• CVE-2023-1672 Medium 5.3 Race condition exists in the key generation and rotation functionality 0.6%
• CVE-2023-3269 High 7.8 Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal 1.3%
• CVE-2023-34432 High 7.8 Heap-buffer-overflow in src/formats_i.c 0.4%
• CVE-2023-34318 High 7.8 Heap-buffer-overflow in src/hcom.c 0.3%
• CVE-2023-32627 Medium 6.2 Floating point exception in src/voc.c 0.3%
• CVE-2023-26590 Medium 6.2 Floating point exception in src/aiff.c 0.2%
• CVE-2023-32254 Critical 9.8 Tree connection race condition remote code execution vulnerability 2.9%
• CVE-2023-32250 Critical 9.0 Session race condition remote code execution vulnerability 2.6%
• CVE-2023-1183 Medium 5.0 Arbitrary file write 64.9%
• CVE-2023-3338 Medium 6.5 Crash due to a null pointer dereference in the dn_nsp_send function 8.5%
• CVE-2023-2908 Medium 5.5 Libtiff: null pointer dereference in tif_dir.c 0.4%
• CVE-2023-3355 Medium 4.7 Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c 0.3%
• CVE-2023-2008 High 8.2 Kernel: udmabuf: improper validation of array index leading to local privilege escalation 1.0%
• CVE-2023-1989 High 7.0 Kernel: use after free bug in btsdio_remove due to race condition 0.4%
• CVE-2021-4037 Medium 4.4 Kernel: security regression for cve-2018-13405 0.3%
• CVE-2020-27792 High 7.1 Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c 0.5%