EL
Product
Enterprise Linux For Ibm Z Systems Eus
On CISA KEVExploited in the wildRansomware-linked
92
CVEs
16
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 50Medium 36Low 1
Watch
Add Enterprise Linux For Ibm Z Systems Eus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-5544 RansomwareIn wildKEV | 9.8 | Dec 6 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Affected: 7.7_s390x |
| CVE-2019-11043 RansomwareIn wildKEV | 9.8 | Oct 28 | Underflow in PHP-FPM can lead to RCE Affected: 7.7_s390x; 8.1_s390x; 8.2_s390x; 8.4_s390x; 8.6_s390x; 8.8_s390x |
| CVE-2015-2590 In wildKEV | 9.8 | Jul 16 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability Affected: 6.7_s390x; 7.1_s390x; 7.2_s390x; 7.3_s390x; 7.4_s390x; 7.5_s390x |
| CVE-2021-40438 RansomwareIn wildKEV | 9.0 | Sep 16 | mod_proxy SSRF Affected: 8.1; 8.4; 8.8 |
| CVE-2019-8720 In wildKEV | 8.8 | Mar 6 | WebKitGTK Memory Corruption Vulnerability Affected: 8.4; 8.6 |
| CVE-2017-12617 In wildKEV | 8.1 | Oct 3 | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g Affected: 7.4_s390x; 7.5_s390x; 7.6_s390x; 7.7_s390x |
| CVE-2017-12615 RansomwareIn wildKEV | 8.1 | Sep 19 | When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g Affected: 7.4_s390x; 7.5_s390x; 7.6_s390x; 7.7_s390x |
| CVE-2023-4911 In wildKEV | 7.8 | Oct 3 | Glibc: buffer overflow in ld.so leading to privilege escalation Affected: 9.2_s390x; 9.4_s390x; 9.6_s390x |
| CVE-2022-0847 In wildKEV | 7.8 | Mar 7 | Linux Kernel Privilege Escalation Vulnerability Affected: 8.2; 8.4 |
| CVE-2022-0492 In wildKEV | 7.8 | Mar 3 | Linux Kernel Improper Authentication Vulnerability Affected: 8.0 |
| CVE-2021-4034 RansomwareIn wildKEV | 7.8 | Jan 28 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Affected: 8.2; 8.4 |
| CVE-2019-0211 In wildKEV | 7.8 | Apr 8 | Apache HTTP Server Privilege Escalation Vulnerability Affected: 8.1_s390x; 8.2_s390x; 8.4_s390x; 8.6_s390x; 8.8_s390x |
| CVE-2013-1675 In wildKEV | 6.5 | May 16 | Mozilla Firefox Information Disclosure Vulnerability Affected: 5.9_s390x; 6.4_s390x |
| CVE-2016-3718 In wildKEV | 5.5 | May 5 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability Affected: 6.7_s390x; 7.2_s390x; 7.3_s390x; 7.4_s390x; 7.5_s390x; 7.6_s390x; +1 more |
| CVE-2016-3715 In wildKEV | 5.5 | May 5 | ImageMagick Arbitrary File Deletion Vulnerability Affected: 6.7_s390x; 7.2_s390x; 7.3_s390x; 7.4_s390x; 7.5_s390x; 7.6_s390x; +1 more |
| CVE-2015-4902 In wildKEV | 5.3 | Oct 21 | Oracle Java SE Integrity Check Vulnerability Affected: 6.7_s390x; 7.2_s390x; 7.3_s390x; 7.4_s390x; 7.5_s390x |
| CVE-2026-1709 | 9.8 | Feb 6 | A flaw was found in Keylime Affected: 10.0_s390x |
| CVE-2022-24805 | 8.8 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.4_s390x |
| CVE-2023-5869 | 8.8 | Dec 10 | A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification Affected: 8.6_s390x; 8.8_s390x; 9.0_s390x; 9.2_s390x |
| CVE-2022-0435 | 8.8 | Mar 25 | A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes… Affected: 8.2; 8.4 |
| CVE-2021-3656 | 8.8 | Mar 4 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization Affected: 8.1; 8.2; 8.4 |
| CVE-2021-44142 | 8.8 | Feb 21 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP… Affected: 8.2; 8.4 |
| CVE-2016-2818 | 8.8 | Jun 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service… Affected: 7.2 |
| CVE-2024-6387 | 8.1 | Jul 1 | Openssh: regresshion - race condition in ssh allows rce/dos Affected: 9.4_s390x |
| CVE-2020-25717 | 8.1 | Feb 18 | A flaw was found in the way Samba maps domain users to local users Affected: 8.2; 8.4 |
| CVE-2025-1756 | 7.8 | Feb 27 | mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a… Affected: 9.4_s390x |
| CVE-2023-3972 | 7.8 | Nov 1 | A vulnerability was found in insights-client Affected: 8.6; 8.8; 9.0; 9.2 |
| CVE-2023-5633 | 7.8 | Oct 23 | The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being… Affected: 8.8_s390x; 9.2_s390x; 9.4_s390x |
| CVE-2023-3899 | 7.8 | Aug 23 | A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization Affected: 8.6; 8.8; 9.0; 9.2 |
| CVE-2023-0494 | 7.8 | Mar 27 | A vulnerability was found in X.Org Affected: 8.4; 8.6 |
| CVE-2021-31566 | 7.8 | Aug 23 | An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive Affected: 8.6 |
| CVE-2021-23177 | 7.8 | Aug 23 | An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link Affected: 8.6 |
| CVE-2022-0330 | 7.8 | Mar 25 | A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU Affected: 8.2; 8.4 |
| CVE-2022-1011 | 7.8 | Mar 18 | A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write() Affected: 8.6 |
| CVE-2022-0516 | 7.8 | Mar 10 | A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel Affected: 8.4 |
| CVE-2021-3551 | 7.8 | Feb 16 | A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file Affected: 8.4 |
| CVE-2019-14815 | 7.8 | Nov 25 | A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2025-13601 | 7.7 | Nov 26 | A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function Affected: 10.0_s390x |
| CVE-2026-59849 | 7.5 | Jul 21 | Libssh: libssh: denial of service via automatic certificate authentication loop Affected: 10.2 |
| CVE-2026-42009 | 7.5 | May 18 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability Affected: 9.8; 10.2 |
| CVE-2025-6021 | 7.5 | Jun 12 | Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 Affected: 9.0_s390x; 9.4_s390x; 9.6_s390x; 10.0_s390x |
| CVE-2024-12087 | 7.5 | Jan 14 | Rsync: path traversal vulnerability in rsync Affected: 9.6_s390x |
| CVE-2024-12088 | 7.5 | Jan 14 | Rsync: --safe-links option bypass leads to path traversal Affected: 9.6_s390x |
| CVE-2024-12085 | 7.5 | Jan 14 | Rsync: info leak via uninitialized stack contents Affected: 8.8_s390x; 9.4_s390x; 9.6_s390x |
| CVE-2023-6536 | 7.5 | Feb 7 | A flaw was found in the Linux kernel's NVMe driver Affected: 8.6_s390x; 9.2_s390x |
| CVE-2023-6535 | 7.5 | Feb 7 | A flaw was found in the Linux kernel's NVMe driver Affected: 8.6_s390x; 9.2_s390x |
| CVE-2023-6356 | 7.5 | Feb 7 | A flaw was found in the Linux kernel's NVMe driver Affected: 8.6_s390x; 9.2_s390x |
| CVE-2023-5157 | 7.5 | Sep 27 | A vulnerability was found in MariaDB Affected: 8.6_s390x; 8.8_s390x; 9.2_s390x |
| CVE-2023-38200 | 7.5 | Jul 24 | A flaw was found in Keylime Affected: 9.2_s390x |
| CVE-2022-27649 | 7.5 | Apr 4 | A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions Affected: 8.4; 8.6 |
