Red Hat Red Hat Enterprise Linux 9

• CVE-2024-5564 High 8.1 Libndp: buffer overflow in route information length field 1.2%
• CVE-2024-3657 High 7.5 389-ds-base: potential denial of service via specially crafted kerberos as-req request 1.3%
• CVE-2024-2199 Medium 5.7 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c 0.6%
• CVE-2024-4693 Medium 5.5 Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash 0.3%
• CVE-2024-3727 High 8.3 Containers/image: digest type does not guarantee valid type 1.3%
• CVE-2024-4418 Medium 6.2 Libvirt: stack use-after-free in virnetclientioeventloop() 0.5%
• CVE-2024-2905 Medium 6.2 Rpm-ostree: world-readable /etc/shadow file 0.3%
• CVE-2024-2467 Medium 5.9 Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack) 0.5%
• CVE-2023-3758 High 7.1 Sssd: race condition during authorization leads to gpo policies functioning inconsistently 1.0%
• CVE-2024-1481 Medium 5.3 Freeipa: specially crafted http requests potentially lead to denial of service 1.1%
• CVE-2024-3567 Medium 5.5 Qemu-kvm: net: assertion failure in update_sctp_checksum() 0.4%
• CVE-2024-3446 High 8.2 Qemu: virtio: dma reentrancy issue leads to double free vulnerability 0.3%
• CVE-2024-31083 High 7.8 Xorg-x11-server: use-after-free in procrenderaddglyphs 1.9%
• CVE-2024-31082 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap 0.3%
• CVE-2024-31081 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice 0.5%
• CVE-2024-31080 High 7.3 Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents 0.5%
• CVE-2024-3296 Medium 5.9 Rust-openssl: timing based side-channel can lead to a bleichenbacher style attack 0.4%
• CVE-2024-3094 Critical 10.0 Xz: malicious code in distributed source 90.9%
• CVE-2024-3019 High 8.8 Pcp: exposure of the redis server backend allows remote command execution via pmproxy 1.1%
• CVE-2024-2947 High 7.3 Cockpit: command injection when deleting a sosreport with a crafted name 1.2%
• CVE-2024-2494 Medium 6.2 Libvirt: negative g_new0 length can lead to unbounded memory allocation 0.4%
• CVE-2024-28834 Medium 5.3 Gnutls: vulnerable to minerva side-channel information leak 0.7%
• CVE-2024-1394 High 7.5 Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads 1.5%
• CVE-2024-28835 Medium 5.0 Gnutls: potential crash during chain building/verification 0.4%
• CVE-2024-2307 Medium 6.1 Osbuild-composer: race condition may disable gpg verification for package repositories 0.2%
• CVE-2024-1753 High 8.6 Buildah: buildah: container escape via improper bind mount validation 0.5%
• CVE-2024-2496 Medium 5.0 Libvirt: null pointer dereference in udevconnectlistallinterfaces() 0.3%
• CVE-2023-7250 Medium 5.3 Iperf3: possible denial of service 0.9%
• CVE-2024-1013 High 7.8 Unixodbc: out of bounds stack write due to pointer-to-integer types conversion 0.3%
• CVE-2024-1441 Medium 5.5 Libvirt: off-by-one error in udevlistinterfacesbystatus() 0.4%
• CVE-2024-2236 Medium 5.9 Libgcrypt: vulnerable to marvin attack 1.1%
• CVE-2023-6917 Medium 6.0 Pcp: unsafe use of directories allows pcp to root privilege escalation 0.2%
• CVE-2024-21886 High 7.8 Xorg-x11-server: heap buffer overflow in disabledevice 1.4%
• CVE-2024-21885 High 7.8 Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent 1.4%
• CVE-2024-1488 High 8.0 Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation 0.3%
• CVE-2024-1454 Low 3.4 Opensc: memory use after free in authentic driver when updating token info 0.4%
• CVE-2023-6681 Medium 5.3 Jwcrypto: denail of service via specifically crafted jwe 0.9%
• CVE-2024-1062 Medium 5.5 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) 0.3%
• CVE-2024-1151 Medium 5.5 Kernel: stack overflow problem in open vswitch kernel module leading to dos 0.3%
• CVE-2024-0229 High 7.8 Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access 1.2%
• CVE-2024-1312 Medium 5.1 Kernel: race condition leads to use after free during vma lock in lock_vma_under_rcu 0.2%
• CVE-2023-6536 Medium 6.5 Kernel: null pointer dereference in __nvmet_req_complete 1.5%
• CVE-2023-6535 Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_execute_request 1.5%
• CVE-2023-6356 Medium 6.5 Kernel: null pointer dereference in nvmet_tcp_build_iovec 1.5%
• CVE-2024-1048 Low 3.3 Grub2: grub2-set-bootflag can be abused by local (pseudo-)users 0.3%
• CVE-2024-0690 Medium 5.0 Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration 0.3%
• CVE-2023-50782 High 7.5 Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659 1.1%
• CVE-2023-50781 High 7.5 M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657 1.1%
• CVE-2023-7216 Medium 5.3 Cpio: extraction allows symlinks which enables remote command execution 0.9%
• CVE-2023-6240 Medium 6.5 Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation 1.0%