Red Hat Red Hat Enterprise Linux 8

• CVE-2024-31081 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice 0.5%
• CVE-2024-31080 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents 0.5%
• CVE-2024-3296 Medium 5.9 Rust-openssl: timing based side-channel can lead to a bleichenbacher style attack 0.4%
• CVE-2024-3094 Critical 10.0 Xz: malicious code in distributed source 90.9%
• CVE-2024-3019 High 8.8 Pcp: exposure of the redis server backend allows remote command execution via pmproxy 1.1%
• CVE-2024-2947 High 7.3 Cockpit: command injection when deleting a sosreport with a crafted name 1.2%
• CVE-2024-2494 Medium 6.2 Libvirt: negative g_new0 length can lead to unbounded memory allocation 0.4%
• CVE-2024-28834 Medium 5.3 Gnutls: vulnerable to minerva side-channel information leak 0.7%
• CVE-2024-1394 High 7.5 Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads 1.5%
• CVE-2024-28835 Medium 5.0 Gnutls: potential crash during chain building/verification 0.4%
• CVE-2024-2307 Medium 6.1 Osbuild-composer: race condition may disable gpg verification for package repositories 0.2%
• CVE-2024-1753 High 8.6 Buildah: buildah: container escape via improper bind mount validation 0.5%
• CVE-2024-2496 Medium 5.0 Libvirt: null pointer dereference in udevconnectlistallinterfaces() 0.3%
• CVE-2024-2002 High 7.5 Libdwarf: crashes randomly on fuzzed object 1.1%
• CVE-2023-7250 Medium 5.3 Iperf3: possible denial of service 0.9%
• CVE-2024-1013 High 7.8 Unixodbc: out of bounds stack write due to pointer-to-integer types conversion 0.3%
• CVE-2024-1441 Medium 5.5 Libvirt: off-by-one error in udevlistinterfacesbystatus() 0.4%
• CVE-2024-2236 Medium 5.9 Libgcrypt: vulnerable to marvin attack 1.1%
• CVE-2023-6917 Medium 6.0 Pcp: unsafe use of directories allows pcp to root privilege escalation 0.2%
• CVE-2024-21886 High 7.8 Xorg-x11-server: heap buffer overflow in disabledevice 1.4%
• CVE-2024-21885 High 7.8 Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent 1.4%
• CVE-2024-1488 High 8.0 Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation 0.3%
• CVE-2024-1454 Low 3.4 Opensc: memory use after free in authentic driver when updating token info 0.4%
• CVE-2023-6681 Medium 5.3 Jwcrypto: denail of service via specifically crafted jwe 0.9%
• CVE-2024-1062 Medium 5.5 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) 0.3%
• CVE-2024-1151 Medium 5.5 Kernel: stack overflow problem in open vswitch kernel module leading to dos 0.3%
• CVE-2024-0229 High 7.8 Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access 1.2%
• CVE-2024-1312 Medium 5.1 Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu 0.2%
• CVE-2023-6536 Medium 6.5 Kernel: null pointer dereference in __nvmet_req_complete 1.5%
• CVE-2023-6535 Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_execute_request 1.5%
• CVE-2023-6356 Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_build_iovec 1.5%
• CVE-2024-1048 Low 3.3 Grub2: grub2-set-bootflag can be abused by local (pseudo-)users 0.3%
• CVE-2024-0690 Medium 5.0 Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration 0.3%
• CVE-2023-50782 High 7.5 Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 1.1%
• CVE-2023-50781 High 7.5 M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657 1.1%
• CVE-2023-7216 Medium 5.3 Cpio: extraction allows symlinks which enables remote command execution 0.9%
• CVE-2023-6240 Medium 6.5 Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation 1.0%
• CVE-2023-6780 Medium 5.3 Glibc: integer overflow in __vsyslog_internal() 2.7%
• CVE-2023-6779 High 8.2 Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal() 3.2%
• CVE-2023-6246 High 8.4 Glibc: heap-based buffer overflow in __vsyslog_internal() 4.8%
• CVE-2023-5992 Medium 5.6 Opensc: side-channel leaks while stripping encryption pkcs#1 padding 1.2%
• CVE-2024-0914 Medium 5.9 Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin) 0.9%
• CVE-2024-0564 Medium 5.3 Kernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplication 0.6%
• CVE-2023-40551 Medium 5.1 Shim: out of bounds read when parsing mz binaries 0.4%
• CVE-2023-40546 Medium 6.2 Shim: out-of-bounds read printing error messages 0.4%
• CVE-2023-40549 Medium 6.2 Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file 0.4%
• CVE-2023-40550 Medium 5.5 Shim: out-of-bound read in verify_buffer_sbat() 0.4%
• CVE-2023-40548 High 7.4 Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems 0.4%
• CVE-2023-6200 High 7.5 Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability 2.0%
• CVE-2024-0841 Medium 6.6 Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function 0.3%