Red Hat Red Hat Enterprise Linux 8

• CVE-2023-43785 Medium 6.5 Libx11: out-of-bounds memory access in _xkbreadkeysyms() 0.7%
• CVE-2023-39194 Low 3.2 Kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match() 0.4%
• CVE-2023-39193 Medium 6.1 Kernel: netfilter: xtables sctp out-of-bounds read in match_flags() 0.4%
• CVE-2023-39192 Medium 6.7 Kernel: netfilter: xtables out-of-bounds read in u32_match_it() 0.4%
• CVE-2023-39189 Medium 5.1 Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one() 0.4%
• CVE-2023-41175 Medium 6.5 Libtiff: potential integer overflow in raw2tiff.c 1.3%
• CVE-2023-40745 Medium 6.5 Libtiff: integer overflow in tiffcp.c 1.4%
• CVE-2023-42755 Medium 6.5 Kernel: rsvp: out-of-bounds read in rsvp_classify() 0.4%
• CVE-2023-42754 Medium 5.5 Kernel: ipv4: null pointer dereference in ipv4_send_dest_unreach() 0.4%
• CVE-2023-39191 High 8.2 Kernel: ebpf: insufficient stack type checks in dynptr 0.5%
• CVE-2023-3576 Medium 5.5 Libtiff: memory leak in tiffcrop.c 0.3%
• CVE-2022-4132 Medium 5.9 Memory leak on tls connections 0.7%
• CVE-2023-4732 Medium 4.7 Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h 0.2%
• CVE-2023-42756 Medium 4.4 Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap 0.3%
• CVE-2023-5215 Medium 5.3 Libnbd: crash or misbehaviour when nbd server returns an unexpected block size 0.8%
• CVE-2023-5157 High 7.5 Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6 2.3%
• CVE-2023-42753 High 7.0 Kernel: netfilter: potential slab-out-of-bound access due to integer underflow 0.5%
• CVE-2022-4245 Medium 4.3 Codehaus-plexus: xml external entity (xxe) injection 0.7%
• CVE-2022-4244 High 7.5 Codehaus-plexus: directory traversal 1.3%
• CVE-2023-4156 Medium 4.4 Heap out of bound read in builtin.c 0.4%
• CVE-2023-5158 Medium 6.5 Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c 0.2%
• CVE-2023-5156 High 7.5 Glibc: dos due to memory leak in getaddrinfo.c 1.6%
• CVE-2023-4806 Medium 5.9 Glibc: potential use-after-free in getaddrinfo() 1.6%
• CVE-2023-4527 Medium 6.5 Glibc: stack read overflow in getaddrinfo in no-aaaa mode 1.7%
• CVE-2023-25584 Medium 6.3 Out of bounds read in parse_module function in bfd/vms-alpha.c 0.4%
• CVE-2023-25585 Medium 4.7 Field `file_table` of `struct module *module` is uninitialized 0.4%
• CVE-2023-25586 Medium 4.7 Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized 0.3%
• CVE-2023-25588 Medium 4.7 Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab` 0.4%
• CVE-2023-32611 Medium 5.5 G_variant_byteswap() can take a long time with some non-normal inputs 0.4%
• CVE-2023-29499 Medium 5.5 Gvariant offset table entry size is not checked in is_normal() 0.8%
• CVE-2023-32665 Medium 5.5 Gvariant deserialisation does not match spec for non-normal data 0.4%
• CVE-2023-2680 High 7.5 Dma reentrancy issue (incomplete fix for cve-2021-3750) 0.2%
• CVE-2023-3255 Medium 6.5 Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service 1.9%
• CVE-2023-4155 Medium 5.3 Sev-es / sev-snp vmgexit double fetch vulnerability 0.2%
• CVE-2023-3301 Medium 5.6 Triggerable assertion due to race condition in hot-unplug 0.3%
• CVE-2023-4813 Medium 5.9 Glibc: potential use-after-free in gaih_inet() 1.9%
• CVE-2023-4611 High 7.0 Use after free race between mbind() and vma-locked page fault 0.3%
• CVE-2023-4569 Medium 5.5 Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c 0.3%
• CVE-2023-4042 Medium 5.5 Ghostscript: incomplete fix for cve-2020-16305 0.3%
• CVE-2023-3899 High 7.8 Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration 0.2%
• CVE-2023-4459 Medium 5.5 Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup() 0.2%
• CVE-2023-4394 Medium 6.7 Memory leak in btrfs_get_dev_args_from_path() 0.2%
• CVE-2023-4389 High 7.0 Kernel: btrfs: double free in btrfs_get_root_ref() 0.3%
• CVE-2023-4387 High 7.1 Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf() 0.2%
• CVE-2023-4385 Medium 5.5 Kernel: jfs: null pointer dereference in dbfree() 0.2%
• CVE-2023-39418 Low 3.1 Postgresql: merge fails to enforce update or select row security policies 1.1%
• CVE-2023-39417 High 7.5 Postgresql: extension script @substitutions@ within quoting allow sql injection 1.7%
• CVE-2023-4273 Medium 6.0 Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry 0.6%
• CVE-2023-4194 Medium 5.5 Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid 0.3%
• CVE-2023-4147 High 7.8 Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free 0.6%