Red Hat Red Hat Enterprise Linux 9

• CVE-2024-10041 Medium 4.7 Pam: libpam: libpam vulnerable to read hashed password 0.3%
• CVE-2024-9050 High 7.8 Networkmanager-libreswan: local privilege escalation via leftupdown 0.5%
• CVE-2024-6519 High 8.2 Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability 0.2%
• CVE-2024-9676 Medium 6.5 Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) 1.3%
• CVE-2024-9979 Medium 5.3 Pyo3: risk of use-after-free in `borrowed` reads from python weak references 0.2%
• CVE-2024-9675 High 7.8 Buildah: buildah allows arbitrary directory mount 0.4%
• CVE-2024-9407 Medium 4.7 Buildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instruction 0.3%
• CVE-2024-9341 Medium 5.4 Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library 1.0%
• CVE-2024-9355 Medium 6.5 Golang-fips: golang fips zeroed buffer 0.3%
• CVE-2024-8612 Low 3.8 Qemu-kvm: information leak in virtio devices 0.2%
• CVE-2024-8354 Medium 5.5 Qemu-kvm: usb: assertion failure in usb_ep_get() 0.3%
• CVE-2024-45770 Medium 4.4 Pcp: pmpost symlink attack allows escalating pcp to root user 0.3%
• CVE-2024-45769 Medium 5.5 Pcp: pmcd heap corruption through metric pmstore operations 0.3%
• CVE-2024-8775 Medium 5.5 Ansible-core: exposure of sensitive information in ansible vault files due to improper logging 0.3%
• CVE-2024-8443 Low 2.9 Libopensc: heap buffer overflow in openpgp driver when generating key 0.3%
• CVE-2024-8445 Medium 5.7 389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199) 0.4%
• CVE-2024-8418 High 7.5 Containers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of service 0.8%
• CVE-2024-45620 Low 3.9 Libopensc: incorrect handling of the length of buffers or files in pkcs15init 0.3%
• CVE-2024-45619 Medium 4.3 Libopensc: incorrect handling length of buffers or files in libopensc 0.3%
• CVE-2024-45618 Low 3.9 Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init 0.3%
• CVE-2024-45617 Low 3.9 Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc 0.3%
• CVE-2024-45616 Low 3.9 Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc 0.4%
• CVE-2024-45615 Low 3.9 Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init 0.4%
• CVE-2024-5148 High 7.5 Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate 0.6%
• CVE-2024-8235 Medium 6.2 Libvirt: crash of virtinterfaced via virconnectlistinterfaces() 0.2%
• CVE-2024-7006 High 7.5 Libtiff: null pointer dereference in tif_dirinfo.c 1.5%
• CVE-2024-43168 Medium 4.8 Unbound: heap-buffer-overflow in unbound 0.3%
• CVE-2024-43167 Low 2.8 Unbound: null pointer dereference in unbound 0.4%
• CVE-2024-7409 High 7.5 Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 1.0%
• CVE-2024-7383 High 7.4 Libnbd: nbd server improper certificate validation 0.4%
• CVE-2024-3056 High 7.7 Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack 0.5%
• CVE-2024-6655 High 7.0 Gtk3: gtk2: library injection from cwd 0.5%
• CVE-2023-39329 Medium 6.5 Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c 0.6%
• CVE-2023-39327 Medium 4.3 Openjpeg: malicious files can cause the program to enter a large loop 0.6%
• CVE-2024-6501 Low 3.1 Networkmanager: denial of service 0.4%
• CVE-2024-6237 Medium 6.5 389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request 0.9%
• CVE-2023-39328 Medium 5.5 Openjpeg: denail of service via crafted image file 0.2%
• CVE-2024-6409 High 7.0 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9 27.9%
• CVE-2024-6505 Medium 6.8 Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss 0.7%
• CVE-2024-6126 Low 3.2 Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option 0.3%
• CVE-2024-4467 High 7.8 Qemu-kvm: 'qemu-img info' leads to host file read/write 0.3%
• CVE-2024-6387 High 8.1 Openssh: regresshion - race condition in ssh allows rce/dos 99.5%
• CVE-2024-6239 High 7.5 Poppler: pdfinfo: crash in broken documents when using -dests parameter 0.8%
• CVE-2024-5953 Medium 5.7 389-ds-base: malformed userpassword hash may cause denial of service 0.6%
• CVE-2024-5742 Medium 6.7 Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file 0.3%
• CVE-2024-5154 High 8.1 Cri-o: malicious container can create symlink on host 1.2%
• CVE-2024-3183 High 8.1 Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force 2.1%
• CVE-2024-2698 High 8.8 Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service 0.7%
• CVE-2023-4727 High 7.5 Ca: token authentication bypass vulnerability 0.7%
• CVE-2024-3049 Medium 5.9 Booth: specially crafted hash can lead to invalid hmac being accepted by booth server 0.5%