Red Hat Red Hat Enterprise Linux 8

• CVE-2023-52356 High 7.5 Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service 2.5%
• CVE-2023-52355 High 7.5 Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom 1.8%
• CVE-2023-40547 High 8.3 Shim: rce in http boot support may lead to secure boot bypass 5.4%
• CVE-2023-39197 Medium 4.0 Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet() 1.0%
• CVE-2024-0775 Medium 6.7 Kernel: use-after-free while changing the mount option in __ext4_remount leading 0.2%
• CVE-2023-6531 High 7.0 Kernel: gc's deletion of an skb races with unix_stream_read_generic() leading to uaf 0.2%
• CVE-2024-0607 Medium 6.6 Kernel: nf_tables: pointer math issue in nft_byteorder_eval() 0.3%
• CVE-2024-0409 High 7.8 Xorg-x11-server: selinux context corruption 0.4%
• CVE-2024-0408 Medium 5.5 Xorg-x11-server: selinux unlabeled glx pbuffer 0.3%
• CVE-2023-6816 Critical 9.8 Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer 2.1%
• CVE-2024-0646 High 7.0 Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination 0.3%
• CVE-2024-0641 Medium 5.5 Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke 0.2%
• CVE-2024-0639 Medium 5.5 Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos 0.2%
• CVE-2024-0582 High 7.8 Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap 12.8%
• CVE-2024-0567 High 7.5 Gnutls: rejects certificate chain with distributed trust 1.4%
• CVE-2024-0232 Medium 4.7 Sqlite: use-after-free bug in jsonparseaddnodearray 0.4%
• CVE-2024-0553 High 7.5 Gnutls: incomplete fix for cve-2023-5981 1.6%
• CVE-2024-0565 Medium 6.8 Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client 2.0%
• CVE-2024-0562 High 7.8 Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c 0.3%
• CVE-2023-4001 Medium 6.8 Grub2: bypass the grub password protection feature 0.5%
• CVE-2023-6915 Medium 6.2 Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c 0.3%
• CVE-2023-6683 Medium 6.5 Qemu: vnc: null pointer dereference in qemu_clipboard_request() 1.3%
• CVE-2024-0443 Medium 5.5 Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline. 0.2%
• CVE-2023-5455 Medium 6.5 Ipa: invalid csrf protection 0.6%
• CVE-2024-0340 Medium 4.4 Kernel: information disclosure in vhost/vhost.c:vhost_new_msg() 0.2%
• CVE-2023-6270 High 7.0 Kernel: aoe: improper reference count leads to use-after-free vulnerability 0.4%
• CVE-2024-0217 Low 3.3 Packagekitd: use-after-free in idle function callback 0.2%
• CVE-2023-6004 Medium 4.8 Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname 0.4%
• CVE-2023-7192 Medium 5.5 Kernel: refcount leak in ctnetlink_create_conntrack() 0.3%
• CVE-2024-0193 High 7.8 Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation 0.8%
• CVE-2023-6693 Medium 4.9 Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx() 0.3%
• CVE-2023-47039 High 7.8 Perl: perl for windows binary hijacking vulnerability 0.4%
• CVE-2023-4641 Medium 4.7 Shadow-utils: possible password leak during passwd(1) change 0.3%
• CVE-2023-7090 Medium 6.6 Sudo: improper handling of ipa_hostname leads to privilege mismanagement 0.7%
• CVE-2023-7008 Medium 5.9 Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes 0.8%
• CVE-2023-7042 Medium 4.4 Kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() 0.3%
• CVE-2023-6546 High 7.0 Kernel: gsm multiplexing race condition leads to privilege escalation 0.7%
• CVE-2023-6918 Low 3.7 Libssh: missing checks for return values for digests 1.4%
• CVE-2023-6228 Low 3.3 Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c 0.4%
• CVE-2023-47038 High 7.0 Perl: write past buffer end via illegal user-defined unicode property 0.8%
• CVE-2023-6478 High 7.6 Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty 1.6%
• CVE-2023-6377 High 7.8 Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions 1.6%
• CVE-2023-6679 Medium 5.5 Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c 0.3%
• CVE-2023-5870 Low 2.2 Postgresql: role pg_signal_backend can signal certain superuser processes. 2.6%
• CVE-2023-5868 Medium 4.3 Postgresql: memory disclosure in aggregate function calls 2.8%
• CVE-2023-5869 High 8.8 Postgresql: buffer overrun from integer overflow in array modification 4.3%
• CVE-2023-6560 Medium 5.5 Kernel: io_uring out of boundary memory access in __io_uaddr_map() 0.3%
• CVE-2023-6622 Medium 5.5 Kernel: null pointer dereference vulnerability in nft_dynset_init() 0.3%
• CVE-2023-6610 High 7.1 Kernel: oob access in smb2_dump_detail 0.4%
• CVE-2023-6606 High 7.1 Kernel: out-of-bounds read vulnerability in smbcalcsize 0.5%