EL
Product
Enterprise Linux Aus
On CISA KEVExploited in the wild
50
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 21Medium 10Low 0
Watch
Add Enterprise Linux Aus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-31277 In wildKEV | 8.8 | Jul 29 | Apple Multiple Products Buffer Overflow Vulnerability Affected: 8.2; 8.4; 8.6 |
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: 8.4; 8.6 |
| CVE-2015-5477 In wildKEV | 7.5 | Jul 29 | ISC BIND Data Processing Errors Vulnerability Affected: 6.4; 6.5; 6.6 |
| CVE-2016-5195 In wildKEV | 7.0 | Nov 10 | Linux Kernel Race Condition Vulnerability Affected: 6.2; 6.4; 6.5 |
| CVE-2021-3570 | 8.8 | Jul 9 | A flaw was found in the ptp4l program of the linuxptp package Affected: 8.2; 8.4 |
| CVE-2024-3183 | 8.1 | Jun 12 | A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key Affected: 8.2; 8.4; 8.6 |
| CVE-2019-9506 | 8.1 | Aug 14 | The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length… Affected: 7.5 |
| CVE-2024-0229 | 7.8 | Feb 9 | An out-of-bounds memory access flaw was found in the X.Org server Affected: 8.2; 8.4 |
| CVE-2023-47038 | 7.8 | Dec 18 | A vulnerability was found in perl 5.30.0 through 5.38.0 Affected: 9.4 |
| CVE-2023-3972 | 7.8 | Nov 1 | A vulnerability was found in insights-client Affected: 8.6 |
| CVE-2023-0494 | 7.8 | Mar 27 | A vulnerability was found in X.Org Affected: 8.4; 8.6 |
| CVE-2018-13405 | 7.8 | Jul 6 | The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory… Affected: 7.4 |
| CVE-2020-1045 | 7.5 | Sep 11 | <p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie… Affected: 8.2; 8.4; 8.6 |
| CVE-2019-11478 | 7.5 | Jun 19 | Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective… Affected: 6.5; 6.6 |
| CVE-2019-11477 | 7.5 | Jun 19 | Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs) Affected: 6.5; 6.6 |
| CVE-2018-14638 | 7.5 | Sep 14 | A flaw was found in 389-ds-base before version 1.3.8.4-13 Affected: 7.6 |
| CVE-2025-62230 | 7.3 | Oct 30 | A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup Affected: 8.2; 8.4; 8.6 |
| CVE-2025-62231 | 7.3 | Oct 30 | A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow Affected: 8.2; 8.4; 8.6 |
| CVE-2021-3609 | 7.0 | Mar 3 | .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or… Affected: 8.2 |
| CVE-2019-11811 | 7.0 | May 7 | An issue was discovered in the Linux kernel before 5.0.4 Affected: 7.6 |
| CVE-2017-10661 | 7.0 | Aug 19 | Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via… Affected: 7.4 |
Showing 21