Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support

• CVE-2024-21885 High 7.8 Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent 1.4%
• CVE-2024-1488 High 8.0 Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation 0.3%
• CVE-2024-1062 Medium 5.5 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) 0.3%
• CVE-2024-0229 High 7.8 Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access 1.2%
• CVE-2023-6536 Medium 6.5 Kernel: null pointer dereference in __nvmet_req_complete 1.5%
• CVE-2023-6535 Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_execute_request 1.5%
• CVE-2023-6356 Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_build_iovec 1.5%
• CVE-2024-0914 Medium 5.9 Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin) 0.9%
• CVE-2023-40551 Medium 5.1 Shim: out of bounds read when parsing mz binaries 0.4%
• CVE-2023-40546 Medium 6.2 Shim: out-of-bounds read printing error messages 0.4%
• CVE-2023-40549 Medium 6.2 Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file 0.4%
• CVE-2023-40550 Medium 5.5 Shim: out-of-bound read in verify_buffer_sbat() 0.4%
• CVE-2023-40548 High 7.4 Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems 0.4%
• CVE-2023-40547 High 8.3 Shim: rce in http boot support may lead to secure boot bypass 5.4%
• CVE-2023-6816 Critical 9.8 Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer 2.1%
• CVE-2024-0646 High 7.0 Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination 0.3%
• CVE-2024-0553 High 7.5 Gnutls: incomplete fix for cve-2023-5981 1.6%
• CVE-2024-0565 Medium 6.8 Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client 2.0%
• CVE-2023-5455 Medium 6.5 Ipa: invalid csrf protection 0.6%
• CVE-2023-7192 Medium 5.5 Kernel: refcount leak in ctnetlink_create_conntrack() 0.3%
• CVE-2023-4641 Medium 4.7 Shadow-utils: possible password leak during passwd(1) change 0.3%
• CVE-2023-6546 High 7.0 Kernel: gsm multiplexing race condition leads to privilege escalation 0.7%
• CVE-2023-6478 High 7.6 Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty 1.6%
• CVE-2023-6377 High 7.8 Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions 1.6%
• CVE-2023-5870 Low 2.2 Postgresql: role pg_signal_backend can signal certain superuser processes. 2.6%
• CVE-2023-5868 Medium 4.3 Postgresql: memory disclosure in aggregate function calls 2.8%
• CVE-2023-5869 High 8.8 Postgresql: buffer overrun from integer overflow in array modification 4.3%
• CVE-2023-6610 High 7.1 Kernel: oob access in smb2_dump_detail 0.4%
• CVE-2023-6606 High 7.1 Kernel: out-of-bounds read vulnerability in smbcalcsize 0.5%
• CVE-2023-5981 Medium 5.9 Gnutls: timing side-channel in the rsa-psk authentication 1.3%
• CVE-2023-42669 Medium 6.5 Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc 1.9%
• CVE-2023-3961 Critical 9.1 Samba: smbd allows client access to unix domain sockets on the file system as root 2.7%
• CVE-2023-5824 High 7.5 Squid: dos against http and https 3.3%
• CVE-2023-4091 Medium 6.5 Samba: smb clients can truncate files with read-only permissions 1.3%
• CVE-2023-5178 High 8.8 Kernel: use after free in nvmet_tcp_free_crypto in nvme 9.6%
• CVE-2023-5367 High 7.8 Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty 0.6%
• CVE-2023-5633 High 7.8 Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling 0.3%
• CVE-2023-5557 High 7.5 Tracker-miners: sandbox escape 0.8%
• CVE-2023-4732 Medium 4.7 Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h 0.2%
• CVE-2023-42753 High 7.0 Kernel: netfilter: potential slab-out-of-bound access due to integer underflow 0.5%
• CVE-2023-39418 Low 3.1 Postgresql: merge fails to enforce update or select row security policies 1.1%
• CVE-2023-39417 High 7.5 Postgresql: extension script @substitutions@ within quoting allow sql injection 1.7%
• CVE-2023-4132 Medium 5.5 Kernel: smsusb: use-after-free caused by do_submit_urb() 0.3%
• CVE-2023-3772 Medium 5.5 Kernel: xfrm: null pointer dereference in xfrm_update_ae_params() 0.5%
• CVE-2023-33951 Medium 6.7 Kernel: vmwgfx: race condition leading to information disclosure vulnerability 0.3%
• CVE-2023-3812 High 7.8 Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags 0.3%
• CVE-2023-3019 Medium 6.0 Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() 0.3%
• CVE-2023-3567 High 7.1 Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race 0.4%
• CVE-2023-33952 Medium 6.7 Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects 0.5%
• CVE-2023-34968 Medium 5.3 Samba: spotlight server-side share path disclosure 1.3%