EL
Product
Enterprise Linux Aus
On CISA KEVExploited in the wild
50
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 21Medium 10Low 0
Watch
Add Enterprise Linux Aus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-31277 In wildKEV | 8.8 | Jul 29 | Apple Multiple Products Buffer Overflow Vulnerability Affected: 8.2; 8.4; 8.6 |
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: 8.4; 8.6 |
| CVE-2015-5477 In wildKEV | 7.5 | Jul 29 | ISC BIND Data Processing Errors Vulnerability Affected: 6.4; 6.5; 6.6 |
| CVE-2016-5195 In wildKEV | 7.0 | Nov 10 | Linux Kernel Race Condition Vulnerability Affected: 6.2; 6.4; 6.5 |
| CVE-2019-10126 | 9.8 | Jun 14 | A flaw was found in the Linux kernel Affected: 8.2; 8.4 |
| CVE-2017-7824 | 9.8 | Jun 11 | A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content Affected: 7.4 |
| CVE-2016-9901 | 9.8 | Jun 11 | HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" (unprivileged) page,… Affected: 7.3; 7.4 |
| CVE-2021-3570 | 8.8 | Jul 9 | A flaw was found in the ptp4l program of the linuxptp package Affected: 8.2; 8.4 |
| CVE-2024-3183 | 8.1 | Jun 12 | A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key Affected: 8.2; 8.4; 8.6 |
| CVE-2019-9506 | 8.1 | Aug 14 | The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length… Affected: 7.5 |
| CVE-2024-0229 | 7.8 | Feb 9 | An out-of-bounds memory access flaw was found in the X.Org server Affected: 8.2; 8.4 |
| CVE-2023-47038 | 7.8 | Dec 18 | A vulnerability was found in perl 5.30.0 through 5.38.0 Affected: 9.4 |
| CVE-2023-3972 | 7.8 | Nov 1 | A vulnerability was found in insights-client Affected: 8.6 |
| CVE-2023-0494 | 7.8 | Mar 27 | A vulnerability was found in X.Org Affected: 8.4; 8.6 |
| CVE-2018-13405 | 7.8 | Jul 6 | The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory… Affected: 7.4 |
| CVE-2020-1045 | 7.5 | Sep 11 | <p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie… Affected: 8.2; 8.4; 8.6 |
| CVE-2019-11478 | 7.5 | Jun 19 | Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective… Affected: 6.5; 6.6 |
| CVE-2019-11477 | 7.5 | Jun 19 | Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs) Affected: 6.5; 6.6 |
| CVE-2018-14638 | 7.5 | Sep 14 | A flaw was found in 389-ds-base before version 1.3.8.4-13 Affected: 7.6 |
| CVE-2025-62230 | 7.3 | Oct 30 | A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup Affected: 8.2; 8.4; 8.6 |
| CVE-2025-62231 | 7.3 | Oct 30 | A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow Affected: 8.2; 8.4; 8.6 |
| CVE-2021-3609 | 7.0 | Mar 3 | .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or… Affected: 8.2 |
| CVE-2019-11811 | 7.0 | May 7 | An issue was discovered in the Linux kernel before 5.0.4 Affected: 7.6 |
| CVE-2017-10661 | 7.0 | Aug 19 | Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via… Affected: 7.4 |
| CVE-2021-20316 | 6.8 | Aug 23 | A flaw was found in the way Samba handled file/directory metadata Affected: 8.6 |
| CVE-2020-14355 | 6.6 | Oct 7 | Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1 Affected: 8.2 |
| CVE-2026-39979 | 6.5 | Apr 13 | jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers Affected: 8.4; 8.6 |
| CVE-2012-0260 | 6.5 | Jun 5 | The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a… Affected: 6.2 |
| CVE-2020-10711 | 5.9 | May 22 | A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7 Affected: 7.4 |
| CVE-2018-1049 | 5.9 | Feb 16 | In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel… Affected: 7.4; 7.6 |
| CVE-2021-3669 | 5.5 | Aug 26 | A flaw was found in the Linux kernel Affected: 8.6 |
| CVE-2018-16878 | 5.5 | Apr 18 | A flaw was found in pacemaker up to and including version 2.0.1 Affected: 8.2; 8.4; 8.6 |
| CVE-2017-7829 | 5.3 | Jun 11 | It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient Affected: 7.4 |
| CVE-2017-7847 | 4.3 | Jun 11 | Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name Affected: 7.4 |
| CVE-2014-9585 | – | Jan 9 | The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users… Affected: 6.6 |
| CVE-2014-9584 | – | Jan 9 | The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use… Affected: 6.6 |
| CVE-2011-1182 | – | Mar 1 | kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call Affected: 5.6 |
| CVE-2013-0783 | – | Feb 19 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before… Affected: 5.9 |
| CVE-2013-0782 | – | Feb 19 | Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3,… Affected: 5.9 |
| CVE-2013-0780 | – | Feb 19 | Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3,… Affected: 5.9 |
| CVE-2013-0776 | – | Feb 19 | Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow man-in-the-middle… Affected: 5.9 |
| CVE-2013-0775 | – | Feb 19 | Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3,… Affected: 5.9 |
| CVE-2013-0772 | – | Feb 19 | The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information… Affected: 5.9 |
| CVE-2011-2213 | – | Aug 29 | The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial… Affected: 5.6 |
| CVE-2011-2492 | – | Jul 28 | The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain potentially sensitive… Affected: 5.6 |
| CVE-2011-1093 | – | Jul 18 | The dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control Protocol (DCCP) implementation in the Linux kernel before 2.6.38 does not properly… Affected: 5.6 |
| CVE-2011-2022 | – | May 9 | The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which allows local users to… Affected: 5.6 |
| CVE-2011-1746 | – | May 9 | Multiple integer overflows in the (1) agp_allocate_memory and (2) agp_create_user_memory functions in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allow local… Affected: 5.6 |
| CVE-2011-1745 | – | May 9 | Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a… Affected: 5.6 |
| CVE-2011-1593 | – | May 3 | Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service (system crash) via a… Affected: 5.6 |
Showing 50