Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service

• CVE-2024-31083 High 7.8 Xorg-x11-server: use-after-free in procrenderaddglyphs 1.9%
• CVE-2024-31081 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice 0.5%
• CVE-2024-31080 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents 0.5%
• CVE-2024-21886 High 7.8 Xorg-x11-server: heap buffer overflow in disabledevice 1.4%
• CVE-2024-21885 High 7.8 Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent 1.4%
• CVE-2024-1488 High 8.0 Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation 0.3%
• CVE-2024-0229 High 7.8 Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access 1.2%
• CVE-2023-40551 Medium 5.1 Shim: out of bounds read when parsing mz binaries 0.4%
• CVE-2023-40546 Medium 6.2 Shim: out-of-bounds read printing error messages 0.4%
• CVE-2023-40549 Medium 6.2 Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file 0.4%
• CVE-2023-40550 Medium 5.5 Shim: out-of-bound read in verify_buffer_sbat() 0.4%
• CVE-2023-40548 High 7.4 Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems 0.4%
• CVE-2023-40547 High 8.3 Shim: rce in http boot support may lead to secure boot bypass 5.4%
• CVE-2023-6816 Critical 9.8 Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer 2.1%
• CVE-2024-0646 High 7.0 Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination 0.3%
• CVE-2023-5455 Medium 6.5 Ipa: invalid csrf protection 0.6%
• CVE-2023-7192 Medium 5.5 Kernel: refcount leak in ctnetlink_create_conntrack() 0.3%
• CVE-2023-6478 High 7.6 Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty 1.6%
• CVE-2023-6377 High 7.8 Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions 1.6%
• CVE-2023-5870 Low 2.2 Postgresql: role pg_signal_backend can signal certain superuser processes. 2.6%
• CVE-2023-5868 Medium 4.3 Postgresql: memory disclosure in aggregate function calls 2.8%
• CVE-2023-5869 High 8.8 Postgresql: buffer overrun from integer overflow in array modification 4.3%
• CVE-2023-46847 High 8.6 Squid: denial of service in http digest authentication 78.5%
• CVE-2023-5824 High 7.5 Squid: dos against http and https 3.3%
• CVE-2023-46846 Critical 9.3 Squid: request/response smuggling in http/1.1 and icap 7.2%
• CVE-2023-5178 High 8.8 Kernel: use after free in nvmet_tcp_free_crypto in nvme 9.6%
• CVE-2023-3972 High 7.8 Insights-client: unsafe handling of temporary files and directories 0.3%
• CVE-2023-5367 High 7.8 Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty 0.6%
• CVE-2023-5557 High 7.5 Tracker-miners: sandbox escape 0.8%
• CVE-2023-42753 High 7.0 Kernel: netfilter: potential slab-out-of-bound access due to integer underflow 0.5%
• CVE-2023-3899 High 7.8 Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration 0.2%
• CVE-2023-4459 Medium 5.5 Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup() 0.2%
• CVE-2023-39417 High 7.5 Postgresql: extension script @substitutions@ within quoting allow sql injection 1.7%
• CVE-2023-4004 High 7.8 Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() 0.9%
• CVE-2023-3812 High 7.8 Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags 0.3%