Red Hat Red Hat Enterprise Linux 9

• CVE-2023-6918 Low 3.7 Libssh: missing checks for return values for digests 1.4%
• CVE-2023-6228 Low 3.3 Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c 0.4%
• CVE-2023-47038 High 7.0 Perl: write past buffer end via illegal user-defined unicode property 0.8%
• CVE-2023-6478 High 7.6 Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty 1.6%
• CVE-2023-6377 High 7.8 Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions 1.6%
• CVE-2023-6710 Medium 5.4 Mod_cluster/mod_proxy_cluster: stored cross site scripting 2.2%
• CVE-2023-6679 Medium 5.5 Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c 0.3%
• CVE-2023-5870 Low 2.2 Postgresql: role pg_signal_backend can signal certain superuser processes. 2.6%
• CVE-2023-5868 Medium 4.3 Postgresql: memory disclosure in aggregate function calls 2.8%
• CVE-2023-5869 High 8.8 Postgresql: buffer overrun from integer overflow in array modification 4.3%
• CVE-2023-6560 Medium 5.5 Kernel: io_uring out of boundary memory access in __io_uaddr_map() 0.3%
• CVE-2023-6622 Medium 5.5 Kernel: null pointer dereference vulnerability in nft_dynset_init() 0.3%
• CVE-2023-6610 High 7.1 Kernel: oob access in smb2_dump_detail 0.4%
• CVE-2023-6606 High 7.1 Kernel: out-of-bounds read vulnerability in smbcalcsize 0.5%
• CVE-2023-5981 Medium 5.9 Gnutls: timing side-channel in the rsa-psk authentication 1.3%
• CVE-2023-5871 Medium 5.3 Libnbd: malicious nbd server may crash libnbd 1.1%
• CVE-2023-6277 Medium 6.5 Libtiff: out-of-memory in tiffopen via a craft file 1.8%
• CVE-2023-5972 High 7.0 Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c 0.3%
• CVE-2023-6238 Medium 6.7 Kernel: nvme: memory corruption via unprivileged user passthrough 0.3%
• CVE-2023-6176 Medium 4.7 Kernel: local dos vulnerability in scatterwalk_copychunks 0.3%
• CVE-2023-6121 Medium 4.3 Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get 1.6%
• CVE-2023-39198 High 7.5 Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create() 0.4%
• CVE-2023-6039 Medium 5.5 Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect 0.3%
• CVE-2023-4154 High 7.5 Samba: ad dc password exposure to privileged users and rodcs 1.4%
• CVE-2023-40661 Medium 5.4 Opensc: multiple memory issues with pkcs15-init (enrollment tool) 1.3%
• CVE-2023-40660 Medium 6.6 Opensc: potential pin bypass when card tracks its own login state 1.0%
• CVE-2023-4535 Medium 4.5 Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys 0.5%
• CVE-2023-5090 Medium 6.0 Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs 0.2%
• CVE-2023-42669 Medium 6.5 Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc 1.9%
• CVE-2023-5088 Medium 6.4 Qemu: improper ide controller reset can lead to mbr overwrite 0.3%
• CVE-2023-3961 Critical 9.1 Samba: smbd allows client access to unix domain sockets on the file system as root 2.7%
• CVE-2023-46847 High 8.6 Squid: denial of service in http digest authentication 78.5%
• CVE-2023-46848 High 8.6 Squid: denial of service in ftp 11.4%
• CVE-2023-42670 Medium 6.5 Samba: ad dc busy rpc multiple listener dos 1.3%
• CVE-2023-5824 High 7.5 Squid: dos against http and https 3.3%
• CVE-2023-4091 Medium 6.5 Samba: smb clients can truncate files with read-only permissions 1.3%
• CVE-2023-1194 High 7.1 Use-after-free in parse_lease_state() 1.1%
• CVE-2023-46846 Critical 9.3 Squid: request/response smuggling in http/1.1 and icap 7.2%
• CVE-2022-4900 Medium 6.2 Potential buffer overflow in php_cli_server_startup_workers 0.4%
• CVE-2023-38473 Medium 6.2 Reachable assertion in avahi_alternative_host_name 0.3%
• CVE-2023-38472 Medium 6.2 Reachable assertion in avahi_rdata_parse 0.3%
• CVE-2023-38471 Medium 6.2 Reachable assertion in dbus_set_host_name 0.3%
• CVE-2023-38470 Medium 6.2 Reachable assertion in avahi_escape_label 0.3%
• CVE-2023-38469 Medium 6.2 Reachable assertion in avahi_dns_packet_append_record 0.3%
• CVE-2023-3164 Medium 5.5 Heap-buffer-overflow in extractimagesection() 0.3%
• CVE-2023-1193 Medium 6.5 Use-after-free in setup_async_work() 1.0%
• CVE-2023-3397 High 7.0 Kernel: slab-use-after-free write in txend due to race condition 0.2%
• CVE-2023-1192 Medium 6.5 Use-after-free in smb2_is_status_io_timeout() 1.1%
• CVE-2023-5178 High 8.8 Kernel: use after free in nvmet_tcp_free_crypto in nvme 9.6%
• CVE-2023-3972 High 7.8 Insights-client: unsafe handling of temporary files and directories 0.3%