CL
Product
Codeready Linux Builder
On CISA KEVExploited in the wild
44
CVEs
4
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 22Medium 22Low 0
Watch
Add Codeready Linux Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-8720 In wildKEV | 8.8 | Mar 6 | WebKitGTK Memory Corruption Vulnerability Affected: 8.0 |
| CVE-2023-4911 In wildKEV | 7.8 | Oct 3 | Glibc: buffer overflow in ld.so leading to privilege escalation Affected: 9.0 |
| CVE-2022-0847 In wildKEV | 7.8 | Mar 7 | Linux Kernel Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2022-0492 In wildKEV | 7.8 | Mar 3 | Linux Kernel Improper Authentication Vulnerability Affected: 8.0; 8.2 |
| CVE-2022-0435 | 8.8 | Mar 25 | A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes… Affected: 8.0; 8.4 |
| CVE-2021-3656 | 8.8 | Mar 4 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization Affected: All versions, or not specified |
| CVE-2021-44142 | 8.8 | Feb 21 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP… Affected: All versions, or not specified |
| CVE-2020-25717 | 8.1 | Feb 18 | A flaw was found in the way Samba maps domain users to local users Affected: All versions, or not specified |
| CVE-2026-4775 | 7.8 | Mar 24 | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing Affected: 8.0; 9.0; 10.0 |
| CVE-2023-5633 | 7.8 | Oct 23 | The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being… Affected: 8.0; 9.0 |
| CVE-2023-0179 | 7.8 | Mar 27 | A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel Affected: All versions, or not specified |
| CVE-2021-31566 | 7.8 | Aug 23 | An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive Affected: All versions, or not specified |
| CVE-2021-23177 | 7.8 | Aug 23 | An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link Affected: All versions, or not specified |
| CVE-2022-0330 | 7.8 | Mar 25 | A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU Affected: 8.0; 8.4 |
| CVE-2022-1011 | 7.8 | Mar 18 | A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write() Affected: All versions, or not specified |
| CVE-2022-0516 | 7.8 | Mar 10 | A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel Affected: All versions, or not specified |
| CVE-2025-13601 | 7.7 | Nov 26 | A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function Affected: 9.0 |
| CVE-2021-3737 | 7.5 | Mar 4 | A flaw was found in python Affected: 8.0 |
| CVE-2025-3155 | 7.4 | Apr 3 | A flaw was found in Yelp Affected: 8.0; 9.0 |
| CVE-2024-1488 | 7.3 | Feb 15 | A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration Affected: 9.0 |
| CVE-2023-3758 | 7.1 | Apr 18 | A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users Affected: 8.0 |
| CVE-2021-3697 | 7.0 | Jul 6 | A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap Affected: All versions, or not specified |
| CVE-2024-0193 | 6.7 | Jan 2 | A use-after-free flaw was found in the netfilter subsystem of the Linux kernel Affected: 9.0 |
| CVE-2026-39979 | 6.5 | Apr 13 | jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers Affected: 8.0; 9.0; 10.0 |
| CVE-2025-2784 | 6.5 | Apr 3 | A flaw was found in libsoup Affected: 10.0 |
| CVE-2023-5455 | 6.5 | Jan 10 | A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA Affected: All versions, or not specified |
| CVE-2021-3975 | 6.5 | Aug 23 | A use-after-free flaw was found in libvirt Affected: All versions, or not specified |
| CVE-2021-20257 | 6.5 | Mar 16 | An infinite loop flaw was found in the e1000 NIC emulator of the QEMU Affected: All versions, or not specified |
| CVE-2021-3733 | 6.5 | Mar 7 | There's a flaw in urllib's AbstractBasicAuthHandler class Affected: 8.0 |
| CVE-2021-3930 | 6.5 | Feb 18 | An off-by-one error was found in the SCSI device emulation in QEMU Affected: 8.0 |
| CVE-2020-14301 | 6.5 | May 27 | An information disclosure vulnerability was found in libvirt in versions before 6.3.0 Affected: All versions, or not specified |
| CVE-2019-3460 | 6.5 | Apr 11 | A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1 Affected: 8.0 |
| CVE-2019-3459 | 6.5 | Apr 11 | A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1 Affected: 8.0 |
| CVE-2016-2124 | 5.9 | Feb 18 | A flaw was found in the way samba implemented SMB1 authentication Affected: All versions, or not specified |
| CVE-2023-6915 | 5.5 | Jan 15 | A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel Affected: 8.0; 9.0; 9.0 |
| CVE-2023-4641 | 5.5 | Dec 27 | A flaw was found in shadow-utils Affected: 8.0; 9.0 |
| CVE-2023-4042 | 5.5 | Aug 23 | A flaw was found in ghostscript Affected: 8.0 |
| CVE-2021-3669 | 5.5 | Aug 26 | A flaw was found in the Linux kernel Affected: All versions, or not specified |
| CVE-2021-3659 | 5.5 | Aug 22 | A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection Affected: All versions, or not specified |
| CVE-2021-3744 | 5.5 | Mar 4 | A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory… Affected: 8.0 |
| CVE-2020-27842 | 5.5 | Jan 5 | There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0 Affected: 8.0 |
| CVE-2023-4732 | 4.7 | Oct 3 | A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel Affected: 8.0 |
| CVE-2021-3696 | 4.5 | Jul 6 | A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader Affected: All versions, or not specified |
| CVE-2021-3695 | 4.5 | Jul 6 | A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area Affected: All versions, or not specified |
Showing 44
