Red Hat Red Hat Enterprise Linux 8

• CVE-2023-5981 Medium 5.9 Gnutls: timing side-channel in the rsa-psk authentication 1.3%
• CVE-2023-5871 Medium 5.3 Libnbd: malicious nbd server may crash libnbd 1.1%
• CVE-2023-6277 Medium 6.5 Libtiff: out-of-memory in tiffopen via a craft file 1.8%
• CVE-2023-5972 High 7.0 Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c 0.3%
• CVE-2023-6238 Medium 6.7 Kernel: nvme: memory corruption via unprivileged user passthrough 0.3%
• CVE-2023-6176 Medium 4.7 Kernel: local dos vulnerability in scatterwalk_copychunks 0.3%
• CVE-2023-6121 Medium 4.3 Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get 1.6%
• CVE-2023-39198 High 7.5 Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create() 0.4%
• CVE-2023-6039 Medium 5.5 Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect 0.3%
• CVE-2023-4154 High 7.5 Samba: ad dc password exposure to privileged users and rodcs 1.4%
• CVE-2023-40661 Medium 5.4 Opensc: multiple memory issues with pkcs15-init (enrollment tool) 1.3%
• CVE-2023-40660 Medium 6.6 Opensc: potential pin bypass when card tracks its own login state 1.0%
• CVE-2023-4535 Medium 4.5 Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys 0.5%
• CVE-2023-5090 Medium 6.0 Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs 0.2%
• CVE-2023-42669 Medium 6.5 Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc 1.9%
• CVE-2023-5088 Medium 6.4 Qemu: improper ide controller reset can lead to mbr overwrite 0.3%
• CVE-2023-3961 Critical 9.1 Samba: smbd allows client access to unix domain sockets on the file system as root 2.7%
• CVE-2023-1476 High 7.0 Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222 0.2%
• CVE-2023-46847 High 8.6 Squid: denial of service in http digest authentication 78.5%
• CVE-2023-46848 High 8.6 Squid: denial of service in ftp 11.4%
• CVE-2023-42670 Medium 6.5 Samba: ad dc busy rpc multiple listener dos 1.3%
• CVE-2023-5824 High 7.5 Squid: dos against http and https 3.3%
• CVE-2023-4091 Medium 6.5 Samba: smb clients can truncate files with read-only permissions 1.3%
• CVE-2023-1194 High 7.1 Use-after-free in parse_lease_state() 1.1%
• CVE-2023-46846 Critical 9.3 Squid: request/response smuggling in http/1.1 and icap 7.2%
• CVE-2022-4900 Medium 6.2 Potential buffer overflow in php_cli_server_startup_workers 0.4%
• CVE-2023-38473 Medium 6.2 Reachable assertion in avahi_alternative_host_name 0.3%
• CVE-2023-38472 Medium 6.2 Reachable assertion in avahi_rdata_parse 0.3%
• CVE-2023-38471 Medium 6.2 Reachable assertion in dbus_set_host_name 0.3%
• CVE-2023-38470 Medium 6.2 Reachable assertion in avahi_escape_label 0.3%
• CVE-2023-38469 Medium 6.2 Reachable assertion in avahi_dns_packet_append_record 0.3%
• CVE-2023-3164 Medium 5.5 Heap-buffer-overflow in extractimagesection() 0.3%
• CVE-2023-1193 Medium 6.5 Use-after-free in setup_async_work() 1.0%
• CVE-2023-3397 High 7.0 Kernel: slab-use-after-free write in txend due to race condition 0.2%
• CVE-2023-1192 Medium 6.5 Use-after-free in smb2_is_status_io_timeout() 1.1%
• CVE-2023-5178 High 8.8 Kernel: use after free in nvmet_tcp_free_crypto in nvme 9.6%
• CVE-2023-3972 High 7.8 Insights-client: unsafe handling of temporary files and directories 0.3%
• CVE-2023-5574 High 7.0 Xorg-x11-server: use-after-free bug in damagedestroy 0.6%
• CVE-2023-5380 Medium 4.7 Xorg-x11-server: use-after-free bug in destroywindow 0.7%
• CVE-2023-5367 High 7.8 Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty 0.6%
• CVE-2023-4692 High 7.5 Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution 0.5%
• CVE-2023-4693 Medium 5.3 Grub2: out-of-bounds read at fs/ntfs.c 0.5%
• CVE-2023-5568 Medium 5.9 Samba: heap buffer overflow with freshness tokens in the heimdal kdc 2.1%
• CVE-2023-5633 High 7.8 Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling 0.3%
• CVE-2023-42752 Medium 5.5 Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access 0.3%
• CVE-2023-5557 High 7.5 Tracker-miners: sandbox escape 0.8%
• CVE-2023-43789 Medium 5.5 Libxpm: out of bounds read on xpm with corrupted colormap 0.4%
• CVE-2023-43788 Medium 5.5 Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer() 0.4%
• CVE-2023-43787 High 7.8 Libx11: integer overflow in xcreateimage() leading to a heap overflow 0.5%
• CVE-2023-43786 Medium 5.5 Libx11: stack exhaustion from infinite recursion in putsubimage() 0.5%