EL
Product
Enterprise Linux For Arm 64
On CISA KEVExploited in the wildRansomware-linked
46
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 23Medium 20Low 0
Watch
Add Enterprise Linux For Arm 64 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11043 RansomwareIn wildKEV | 9.8 | Oct 28 | Underflow in PHP-FPM can lead to RCE Affected: 8.0_aarch64 |
| CVE-2021-40438 RansomwareIn wildKEV | 9.0 | Sep 16 | mod_proxy SSRF Affected: 8.0 |
| CVE-2023-4911 In wildKEV | 7.8 | Oct 3 | Glibc: buffer overflow in ld.so leading to privilege escalation Affected: 9.0_aarch64 |
| CVE-2019-13272 In wildKEV | 7.8 | Jul 17 | Linux Kernel Improper Privilege Management Vulnerability Affected: 7.0_aarch64 |
| CVE-2019-0211 In wildKEV | 7.8 | Apr 8 | Apache HTTP Server Privilege Escalation Vulnerability Affected: 8.0_aarch64 |
| CVE-2026-1709 | 9.8 | Feb 6 | A flaw was found in Keylime Affected: 9.0_aarch64; 10.0_aarch64 |
| CVE-2022-24805 | 8.8 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.0; 9.2_aarch64; 9.4_aarch64 |
| CVE-2023-5869 | 8.8 | Dec 10 | A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification Affected: 8.0; 8.8_aarch64 |
| CVE-2024-6387 | 8.1 | Jul 1 | Openssh: regresshion - race condition in ssh allows rce/dos Affected: 9.0_aarch64 |
| CVE-2025-1756 | 7.8 | Feb 27 | mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a… Affected: 9.4_aarch64 |
| CVE-2025-1755 | 7.8 | Feb 27 | MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges,… Affected: 9.0_aarch64 |
| CVE-2023-3972 | 7.8 | Nov 1 | A vulnerability was found in insights-client Affected: 8.0 |
| CVE-2023-5633 | 7.8 | Oct 23 | The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being… Affected: 8.0_aarch64; 9.0_aarch64 |
| CVE-2023-3899 | 7.8 | Aug 23 | A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization Affected: 8.0; 9.0; 9.2 |
| CVE-2025-13601 | 7.7 | Nov 26 | A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function Affected: 9.0; 10.0; 8.0; 9.2; 9.4; 9.6 |
| CVE-2025-6021 | 7.5 | Jun 12 | Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 Affected: 8.0_aarch64; 9.0_aarch64; 9.4_aarch64; 10.0_aarch64 |
| CVE-2024-12087 | 7.5 | Jan 14 | Rsync: path traversal vulnerability in rsync Affected: 8.0_aarch64; 9.0_aarch64 |
| CVE-2024-12088 | 7.5 | Jan 14 | Rsync: --safe-links option bypass leads to path traversal Affected: 8.0_aarch64; 9.0_aarch64 |
| CVE-2024-12085 | 7.5 | Jan 14 | Rsync: info leak via uninitialized stack contents Affected: 8.0_aarch64; 9.0_aarch64; 9.2_aarch64 |
| CVE-2024-7006 | 7.5 | Aug 12 | A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c` Affected: 9.2 |
| CVE-2023-46847 | 7.5 | Nov 3 | Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is… Affected: 8.0_aarch64 |
| CVE-2023-5157 | 7.5 | Sep 27 | A vulnerability was found in MariaDB Affected: 8.0_aarch64; 9.0_aarch64 |
| CVE-2019-6470 | 7.5 | Nov 1 | There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode Affected: 8.0 |
| CVE-2025-3155 | 7.4 | Apr 3 | A flaw was found in Yelp Affected: 8.0; 8.8_aarch64; 9.0_aarch64; 9.2_aarch64 |
| CVE-2024-1488 | 7.3 | Feb 15 | A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration Affected: 8.0_aarch64; 9.0_aarch64; 9.2_aarch64 |
| CVE-2023-3758 | 7.1 | Apr 18 | A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users Affected: 8.0_aarch64 |
| CVE-2024-0193 | 6.7 | Jan 2 | A use-after-free flaw was found in the netfilter subsystem of the Linux kernel Affected: 9.4_aarch64; 9.6_aarch64; 9.0_aarch64 |
| CVE-2025-2784 | 6.5 | Apr 3 | A flaw was found in libsoup Affected: 8.0_aarch64; 9.0_aarch64; 10.0_aarch64 |
| CVE-2024-9676 | 6.5 | Oct 15 | A vulnerability was found in Podman, Buildah, and CRI-O Affected: 9.0_aarch64 |
| CVE-2022-24809 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.0; 9.2_aarch64; 9.4_aarch64 |
| CVE-2022-24808 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.0; 9.2_aarch64; 9.4_aarch64 |
| CVE-2022-24807 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.0; 9.2_aarch64; 9.4_aarch64 |
| CVE-2023-4527 | 6.5 | Sep 18 | Glibc: stack read overflow in getaddrinfo in no-aaaa mode Affected: 9.0_aarch64 |
| CVE-2024-3049 | 5.9 | Jun 6 | A flaw was found in Booth, a cluster ticket manager Affected: 8.0_aarch64; 8.8_aarch64; 9.2_aarch64; 9.4_aarch64 |
| CVE-2023-5992 | 5.9 | Jan 31 | A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant Affected: 8.0_aarch64; 9.0_aarch64 |
| CVE-2023-4806 | 5.9 | Sep 18 | Glibc: potential use-after-free in getaddrinfo() Affected: 9.0_aarch64 |
| CVE-2023-4641 | 5.5 | Dec 27 | A flaw was found in shadow-utils Affected: 8.0; 9.0 |
| CVE-2023-4042 | 5.5 | Aug 23 | A flaw was found in ghostscript Affected: 8.0_aarch64 |
| CVE-2022-24806 | 5.3 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.0; 9.2_aarch64; 9.4_aarch64 |
| CVE-2023-7250 | 5.3 | Mar 18 | A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP Affected: 8.0_aarch64; 9.0_aarch64 |
| CVE-2023-6681 | 5.3 | Feb 12 | A vulnerability was found in JWCrypto Affected: 8.0 |
| CVE-2023-46846 | 5.3 | Nov 3 | SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend… Affected: 8.0_aarch64 |
| CVE-2023-4732 | 4.7 | Oct 3 | A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel Affected: 8.0_aarch64 |
| CVE-2024-9675 | 4.4 | Oct 9 | A vulnerability was found in Buildah Affected: 8.0_aarch64; 9.0_aarch64 |
| CVE-2023-5870 | 4.4 | Dec 10 | A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the… Affected: 8.0; 8.8_aarch64 |
| CVE-2023-5868 | 4.3 | Dec 10 | A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with… Affected: 8.0; 8.8_aarch64 |
Showing 46
