EL
Product
Enterprise Linux Eus
On CISA KEVExploited in the wildRansomware-linked
789
CVEs
42
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 73High 196Medium 231Low 0
Watch
Add Enterprise Linux Eus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-7512 | 9.0 | Jan 8 | Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash)… Affected: 6.7 |
| CVE-2022-24805 | 8.8 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.2; 9.4 |
| CVE-2023-5869 | 8.8 | Dec 10 | A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification Affected: 8.6; 8.8; 9.0; 9.2 |
| CVE-2023-2203 | 8.8 | May 17 | A flaw was found in the WebKitGTK package Affected: 8.8; 9.2 |
| CVE-2022-1227 | 8.8 | Apr 29 | A privilege escalation flaw was found in Podman Affected: 8.6 |
| CVE-2022-0435 | 8.8 | Mar 25 | A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes… Affected: 8.2; 8.4 |
| CVE-2021-3656 | 8.8 | Mar 4 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization Affected: 8.1; 8.2; 8.4 |
| CVE-2021-44142 | 8.8 | Feb 21 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP… Affected: 8.2; 8.4 |
| CVE-2021-3621 | 8.8 | Dec 23 | A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands Affected: 8.1; 8.2 |
| CVE-2021-3570 | 8.8 | Jul 9 | A flaw was found in the ptp4l program of the linuxptp package Affected: 8.1; 8.2 |
| CVE-2020-0603 | 8.8 | Jan 14 | A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability… Affected: 8.1 |
| CVE-2019-17024 | 8.8 | Jan 8 | Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3 Affected: 7.7; 8.1; 8.2; 8.4 |
| CVE-2019-13734 | 8.8 | Dec 10 | Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 7.7; 8.1; 8.2; 8.4 |
| CVE-2019-14287 | 8.8 | Oct 17 | In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by… Affected: 7.5; 7.6; 7.7; 8.1; 8.2; 8.4 |
| CVE-2019-14821 | 8.8 | Sep 19 | An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation Affected: 7.7 |
| CVE-2019-12527 | 8.8 | Jul 11 | An issue was discovered in Squid 4.0.23 through 4.7 Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-9810 | 8.8 | Apr 26 | Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow Affected: 8.1; 8.2; 8.4 |
| CVE-2018-10392 | 8.8 | Apr 26 | mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer… Affected: 8.1; 8.2; 8.4 |
| CVE-2016-9842 | 8.8 | May 23 | The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers Affected: 7.4; 7.5 |
| CVE-2016-9840 | 8.8 | May 23 | inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: 7.4; 7.5 |
| CVE-2014-1531 | 8.8 | Apr 30 | Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5,… Affected: 6.5 |
| CVE-2014-1529 | 8.8 | Apr 30 | The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to bypass… Affected: 6.5 |
| CVE-2014-1518 | 8.8 | Apr 30 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allow… Affected: 6.5 |
| CVE-2014-1513 | 8.8 | Mar 19 | TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition… Affected: 6.5 |
| CVE-2014-1509 | 8.8 | Mar 19 | Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and… Affected: 6.5 |
| CVE-2014-1497 | 8.8 | Mar 19 | The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote… Affected: 6.5 |
| CVE-2014-1482 | 8.8 | Feb 6 | RasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent access to discarded data, which… Affected: 6.5 |
| CVE-2012-5830 | 8.8 | Nov 21 | Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before… Affected: 6.3 |
| CVE-2012-0247 | 8.8 | Jun 5 | ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset and count values in… Affected: 6.2 |
| CVE-2022-2601 | 8.6 | Dec 14 | A buffer overflow was found in grub_font_construct_glyph() Affected: 9.0 |
| CVE-2014-0144 | 8.6 | Sep 29 | QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused… Affected: 6.5 |
| CVE-2015-1779 | 8.6 | Jan 12 | The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers… Affected: 7.1; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more |
| CVE-2016-2857 | 8.4 | Apr 12 | The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length… Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2018-3169 | 8.3 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 7.6 |
| CVE-2018-3149 | 8.3 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI) Affected: 7.6 |
| CVE-2018-2639 | 8.3 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 7.5 |
| CVE-2018-2638 | 8.3 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 7.5 |
| CVE-2017-10116 | 8.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-10074 | 8.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2018-11806 | 8.2 | Jun 13 | m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams Affected: 7.5; 7.6; 7.7 |
| CVE-2024-6387 | 8.1 | Jul 1 | Openssh: regresshion - race condition in ssh allows rce/dos Affected: 9.4 |
| CVE-2024-3183 | 8.1 | Jun 12 | A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key Affected: 8.8 |
| CVE-2020-25717 | 8.1 | Feb 18 | A flaw was found in the way Samba maps domain users to local users Affected: 8.2; 8.4 |
| CVE-2020-2604 | 8.1 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 7.7; 8.1 |
| CVE-2018-1311 | 8.1 | Dec 18 | The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs Affected: 7.7 |
| CVE-2019-16776 | 8.1 | Dec 13 | Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write Affected: 8.1 |
| CVE-2019-9506 | 8.1 | Aug 14 | The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length… Affected: 7.6; 7.7; 8.1; 8.2; 8.4 |
| CVE-2019-13616 | 8.1 | Jul 16 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in… Affected: 7.7; 8.1 |
| CVE-2019-2698 | 8.1 | Apr 23 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2697 | 8.1 | Apr 23 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D) Affected: 8.6 |
The 500 most important CVEs for this product (exploited first, then by severity)