Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support

• CVE-2023-4911 High 7.8 Exploited Glibc: buffer overflow in ld.so leading to privilege escalation 63.8%
• CVE-2024-9675 High 7.8 Buildah: buildah allows arbitrary directory mount 0.4%
• CVE-2024-3183 High 8.1 Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force 2.1%
• CVE-2023-3758 High 7.1 Sssd: race condition during authorization leads to gpo policies functioning inconsistently 1.0%
• CVE-2024-31083 High 7.8 Xorg-x11-server: use-after-free in procrenderaddglyphs 1.9%
• CVE-2024-31081 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice 0.5%
• CVE-2024-31080 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents 0.5%
• CVE-2024-3019 High 8.8 Pcp: exposure of the redis server backend allows remote command execution via pmproxy 1.1%
• CVE-2024-1753 High 8.6 Buildah: buildah: container escape via improper bind mount validation 0.5%
• CVE-2024-21886 High 7.8 Xorg-x11-server: heap buffer overflow in disabledevice 1.4%
• CVE-2024-21885 High 7.8 Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent 1.4%
• CVE-2024-1488 High 8.0 Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation 0.3%
• CVE-2024-0229 High 7.8 Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access 1.2%
• CVE-2023-6240 Medium 6.5 Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation 1.0%
• CVE-2023-40551 Medium 5.1 Shim: out of bounds read when parsing mz binaries 0.4%
• CVE-2023-40546 Medium 6.2 Shim: out-of-bounds read printing error messages 0.4%
• CVE-2023-40549 Medium 6.2 Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file 0.4%
• CVE-2023-40550 Medium 5.5 Shim: out-of-bound read in verify_buffer_sbat() 0.4%
• CVE-2023-40548 High 7.4 Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems 0.4%
• CVE-2023-40547 High 8.3 Shim: rce in http boot support may lead to secure boot bypass 5.4%
• CVE-2023-6816 Critical 9.8 Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer 2.1%
• CVE-2024-0646 High 7.0 Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination 0.3%
• CVE-2023-4001 Medium 6.8 Grub2: bypass the grub password protection feature 0.5%
• CVE-2023-5455 Medium 6.5 Ipa: invalid csrf protection 0.6%
• CVE-2023-7192 Medium 5.5 Kernel: refcount leak in ctnetlink_create_conntrack() 0.3%
• CVE-2023-6546 High 7.0 Kernel: gsm multiplexing race condition leads to privilege escalation 0.7%
• CVE-2023-6478 High 7.6 Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty 1.6%
• CVE-2023-6377 High 7.8 Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions 1.6%
• CVE-2023-5870 Low 2.2 Postgresql: role pg_signal_backend can signal certain superuser processes. 2.6%
• CVE-2023-5868 Medium 4.3 Postgresql: memory disclosure in aggregate function calls 2.8%
• CVE-2023-5869 High 8.8 Postgresql: buffer overrun from integer overflow in array modification 4.3%
• CVE-2023-42669 Medium 6.5 Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc 1.9%
• CVE-2023-3961 Critical 9.1 Samba: smbd allows client access to unix domain sockets on the file system as root 2.7%
• CVE-2023-46847 High 8.6 Squid: denial of service in http digest authentication 78.5%
• CVE-2023-46848 High 8.6 Squid: denial of service in ftp 11.4%
• CVE-2023-5824 High 7.5 Squid: dos against http and https 3.3%
• CVE-2023-4091 Medium 6.5 Samba: smb clients can truncate files with read-only permissions 1.3%
• CVE-2023-46846 Critical 9.3 Squid: request/response smuggling in http/1.1 and icap 7.2%
• CVE-2023-5178 High 8.8 Kernel: use after free in nvmet_tcp_free_crypto in nvme 9.6%
• CVE-2023-3972 High 7.8 Insights-client: unsafe handling of temporary files and directories 0.3%
• CVE-2023-5367 High 7.8 Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty 0.6%
• CVE-2023-5557 High 7.5 Tracker-miners: sandbox escape 0.8%
• CVE-2023-5157 High 7.5 Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6 2.3%
• CVE-2023-42753 High 7.0 Kernel: netfilter: potential slab-out-of-bound access due to integer underflow 0.5%
• CVE-2023-3899 High 7.8 Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration 0.2%
• CVE-2023-4459 Medium 5.5 Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup() 0.2%
• CVE-2023-39417 High 7.5 Postgresql: extension script @substitutions@ within quoting allow sql injection 1.7%
• CVE-2023-4147 High 7.8 Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free 0.6%
• CVE-2023-4004 High 7.8 Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() 0.9%
• CVE-2023-3812 High 7.8 Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags 0.3%