VulnSea

enterprise_linux vulnerabilities

CVEs whose affected-version data names the enterprise_linux package (go, pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

678 CVEsRSS

CVE-2023-50781High· 7.5
2y ago

A flaw was found in m2crypto

A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

▾ Twilightredhat · update_infrastructureEPSS 1.1%via NVD
CVE-2023-52355High· 7.5
2y ago

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smal…

▾ Twilightlibtiff · libtiffEPSS 1.8%via NVD
CVE-2023-40547High· 8.3
2y ago

A remote code execution vulnerability was found in Shim

A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw allows an attacker to craft a specific malicious HTTP request, leading to a complet…

▾ Twilightredhat · shimEPSS 5.4%via NVD
CVE-2024-0775Medium· 6.7
2y ago

A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel

A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, l…

▾ Sunlitlinux · linux_kernelEPSS 0.22%via NVD
CVE-2023-6531High· 7.0
2y ago

A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.

A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on.

▾ Twilightlinux · linux_kernelEPSS 0.22%via NVD
CVE-2024-0646High· 7.0
2y ago

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially …

▾ Twilightlinux · linux_kernelEPSS 0.31%via NVD
CVE-2024-0639Medium· 5.5
2y ago

A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem

A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially cr…

▾ Sunlitlinux · linux_kernelEPSS 0.18%via NVD
CVE-2024-0443Medium· 5.5
2y ago

A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem

A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), w…

▾ Sunlitlinux · linux_kernelEPSS 0.25%via NVD
CVE-2023-6546High· 7.00dayPoC
2y ago

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOC_SETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a u…

▾ Abyssallinux · linux_kernelEPSS 0.73%via NVD
CVE-2023-6710Medium· 5.4PoC
2y ago

A flaw was found in the mod_proxy_cluster in the Apache server

A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script …

▾ Twilightmodcluster · mod_proxy_clusterEPSS 2.2%via NVD
CVE-2023-5868Medium· 4.3
2y ago

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string l…

▾ Sunlitpostgresql · postgresqlEPSS 2.8%via NVD
CVE-2023-6610High· 7.1
2y ago

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

▾ Twilightlinux · linux_kernelEPSS 0.43%via NVD
CVE-2023-5090Medium· 6.0
2y ago

A flaw was found in KVM

A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition.

▾ Sunlitlinux · linux_kernelEPSS 0.23%via NVD
CVE-2023-46847High· 8.6
2y ago

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

▾ Twilightsquid-cache · squidEPSS 88%via NVD
CVE-2023-4693Medium· 5.3
2y ago

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver

An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted NTFS file system image to read arbitrary memory locations. A successful attack allo…

▾ Sunlitgnu · grub2EPSS 0.50%via NVD
CVE-2023-4692High· 7.5
2y ago

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack…

▾ Twilightgnu · grub2EPSS 0.54%via NVD
CVE-2023-5574High· 7.0
2y ago

A use-after-free flaw was found in xorg-x11-server-Xvfb

A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode). If the pointer is warped f…

▾ Twilightx.org · x_serverEPSS 0.62%via NVD
CVE-2023-5380Medium· 4.7
2y ago

A use-after-free flaw was found in the xorg-x11-server

A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped fro…

▾ Sunlitx.org · x_serverEPSS 0.71%via NVD
CVE-2023-5367High· 7.8
2y ago

A out-of-bounds write flaw was found in the xorg-x11-server

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRCha…

▾ Twilightx.org · x_serverEPSS 0.62%via NVD
CVE-2023-3576Medium· 5.5
2y ago

A memory leak flaw was found in Libtiff's tiffcrop utility

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, r…

▾ Sunlitlibtiff · libtiffEPSS 0.35%via NVD
CVE-2023-42753High· 7.0
3y ago

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decre…

▾ Twilightlinux · linux_kernelEPSS 0.51%via NVD
CVE-2023-4806Medium· 5.9
3y ago

A flaw has been identified in glibc

A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the …

▾ Sunlitgnu · glibcEPSS 1.6%via NVD
CVE-2023-38559Medium· 5.5
3y ago

A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript

A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.

▾ Sunlitartifex · ghostscriptEPSS 0.43%via NVD
CVE-2023-3640High· 7.0PoC
3y ago

A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data

A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-…

▾ Midnightlinux · linux_kernelEPSS 0.76%via NVD
CVE-2023-1380High· 7.1
3y ago

A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel

A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buf…

▾ Twilightredhat · enterprise_linuxEPSS 17%via NVD
CVE-2023-27534Low· 3.7PoC⚖ disputed
3y ago

curl: SFTP path ~ resolving discrepancy (CVE-2023-27534)

A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicat…

▾ TwilightRed Hat · Red Hat Enterprise Linux BaseOS (v. 9)EPSS 2.2%via CSAF
CVE-2023-27522High· 7.5
3y ago

httpd: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522)

An HTTP Response Smuggling vulnerability was found in the Apache HTTP Server via mod_proxy_uwsgi. This security issue occurs when special characters in the origin response header can truncate or split the response forwarded to the client.

▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream EUS (v.8.6)EPSS 2.1%via CSAF
CVE-2023-0286High· 7.4
3y ago

openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)

A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled (for example, the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability ma…

▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream (v. 9)EPSS 60%via CSAF
CVE-2022-39324Medium· 6.7
3y ago

grafana: Spoofing of the originalUrl parameter of snapshots (CVE-2022-39324)

A flaw was found in the grafana package. While creating a snapshot, an attacker may manipulate a hidden HTTP parameter to inject a malicious URL in the "Open original dashboard" button.

▾ SunlitRed Hat · Red Hat Enterprise Linux 8EPSS 0.83%via CSAF
CVE-2022-41721High· 7.5
3y ago

x/net/http2/h2c: request smuggling (CVE-2022-41721)

A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP request is not fully consumed. When the server attempts to read HTTP2 frames from the connection, it will instead read the b…

▾ TwilightRed Hat · OpenShift Service Mesh 2.1EPSS 1.8%via CSAF
enterprise_linux vulnerabilities (CVEs) — page 22 · VulnSea