Red Hat Red Hat Enterprise Linux 8

• CVE-2023-4135 Medium 6.0 Out-of-bounds read information disclosure vulnerability 0.4%
• CVE-2023-4132 Medium 5.5 Kernel: smsusb: use-after-free caused by do_submit_urb() 0.3%
• CVE-2023-4133 Medium 5.5 Kernel: cxgb4: use-after-free in ch_flower_stats_cb() 0.2%
• CVE-2023-3180 Medium 6.0 Heap buffer overflow in virtio_crypto_sym_op_helper() 0.2%
• CVE-2023-38560 Medium 5.5 Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name 0.3%
• CVE-2023-38559 Medium 5.5 Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos 0.4%
• CVE-2023-4004 High 7.8 Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() 0.9%
• CVE-2023-3773 Medium 5.5 Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr 0.3%
• CVE-2023-3772 Medium 5.5 Kernel: xfrm: null pointer dereference in xfrm_update_ae_params() 0.5%
• CVE-2023-3640 High 7.0 Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space 0.8%
• CVE-2023-32248 High 7.5 Tree connection null pointer dereference denial-of-service vulnerability 4.1%
• CVE-2023-32257 High 8.1 Session race condition remote code execution vulnerability 2.4%
• CVE-2023-32252 High 7.5 Session null pointer dereference denial-of-service vulnerability 4.1%
• CVE-2023-32258 High 8.1 Session race condition remote code execution vulnerability 2.5%
• CVE-2023-1386 Low 3.3 Qemu: 9pfs: suid/sgid bits not dropped on file write 0.2%
• CVE-2023-33951 Medium 6.7 Kernel: vmwgfx: race condition leading to information disclosure vulnerability 0.3%
• CVE-2023-32247 High 7.5 Session setup memory exhaustion denial-of-service vulnerability 3.9%
• CVE-2023-3750 Medium 6.5 Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service 0.8%
• CVE-2023-3812 High 7.8 Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags 0.3%
• CVE-2023-3748 Low 3.5 Inifinite loop in babld message parsing may cause dos 0.8%
• CVE-2023-3019 Medium 6.0 Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() 0.3%
• CVE-2023-3567 High 7.1 Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race 0.4%
• CVE-2023-33952 Medium 6.7 Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects 0.5%
• CVE-2023-2860 Medium 4.4 Out-of-bounds read when setting hmac data 0.3%
• CVE-2023-3863 Medium 6.4 Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c 0.2%
• CVE-2023-3603 Low 3.1 Processing sftp server read may cause null dereference 0.9%
• CVE-2023-34968 Medium 5.3 Samba: spotlight server-side share path disclosure 1.3%
• CVE-2023-34967 Medium 5.3 Samba: type confusion in mdssvc rpc service for spotlight 61.2%
• CVE-2023-34966 High 7.5 Samba: infinite loop in mdssvc rpc service for spotlight 62.4%
• CVE-2023-3347 Medium 5.9 Samba: smb2 packet signing is not enforced when "server signing = required" is set 0.4%
• CVE-2022-2127 Medium 5.9 Samba: out-of-bounds read in winbind auth_crap 1.7%
• CVE-2023-0160 Medium 4.7 Possibility of deadlock in libbpf function sock_hash_delete_elem 0.3%
• CVE-2023-3618 Medium 6.5 Segmentation fault in fax3encode in libtiff/tif_fax3.c 1.2%
• CVE-2023-3106 Medium 6.6 Kernel: netlink socket crash (null pointer deref) in netlink_dump function 0.3%
• CVE-2023-3354 High 7.5 Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service 1.6%
• CVE-2023-3108 Medium 6.2 Kernel: a race condition in crypto module in the function skcipher_recvmsg 0.2%
• CVE-2023-1672 Medium 5.3 Race condition exists in the key generation and rotation functionality 0.6%
• CVE-2023-3269 High 7.8 Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal 1.3%
• CVE-2023-32254 Critical 9.8 Tree connection race condition remote code execution vulnerability 2.9%
• CVE-2023-32250 Critical 9.0 Session race condition remote code execution vulnerability 2.6%
• CVE-2023-1183 Medium 5.0 Arbitrary file write 64.9%
• CVE-2023-2908 Medium 5.5 Libtiff: null pointer dereference in tif_dir.c 0.4%
• CVE-2023-3338 Medium 6.5 Crash due to a null pointer dereference in the dn_nsp_send function 8.5%
• CVE-2023-3355 Medium 4.7 Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c 0.3%
• CVE-2023-2008 High 8.2 Kernel: udmabuf: improper validation of array index leading to local privilege escalation 1.0%
• CVE-2023-1989 High 7.0 Kernel: use after free bug in btsdio_remove due to race condition 0.4%
• CVE-2021-4037 Medium 4.4 Kernel: security regression for cve-2018-13405 0.3%
• CVE-2020-27792 High 7.1 Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c 0.5%