EL
Product
Enterprise Linux For Ibm Z Systems
On CISA KEVExploited in the wildRansomware-linked
117
CVEs
20
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 61Medium 45Low 0
Watch
Add Enterprise Linux For Ibm Z Systems to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3602 | 5.5 | Mar 3 | An information disclosure flaw was found in Buildah, when building containers using chroot isolation Affected: 8.0 |
| CVE-2020-27842 | 5.5 | Jan 5 | There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0 Affected: 8.0 |
| CVE-2026-59842 | 5.3 | Jul 21 | Libssh: libssh: information disclosure via short gssapi curve25519 public key Affected: 10.0; 10.2 |
| CVE-2022-24806 | 5.3 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.0; 9.2_s390x; 9.4_s390x |
| CVE-2023-7250 | 5.3 | Mar 18 | A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP Affected: 8.0_s390x; 9.0_s390x |
| CVE-2023-6681 | 5.3 | Feb 12 | A vulnerability was found in JWCrypto Affected: 8.0 |
| CVE-2023-46846 | 5.3 | Nov 3 | SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend… Affected: 8.0_s390x |
| CVE-2019-7317 | 5.3 | Feb 4 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute Affected: 6.0; 7.0; 8.0 |
| CVE-2023-4732 | 4.7 | Oct 3 | A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel Affected: 8.0_s390x |
| CVE-2017-15129 | 4.7 | Jan 9 | A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11 Affected: 7.0 |
| CVE-2024-9675 | 4.4 | Oct 9 | A vulnerability was found in Buildah Affected: 8.0_s390x; 9.0_s390x |
| CVE-2023-5870 | 4.4 | Dec 10 | A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the… Affected: 8.0_s390x |
| CVE-2023-5868 | 4.3 | Dec 10 | A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with… Affected: 8.0_s390x |
| CVE-2012-2665 | – | Aug 6 | Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a… Affected: 6.0 |
| CVE-2012-1717 | – | Jun 16 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37… Affected: 5.0 |
| CVE-2007-6283 | – | Dec 18 | Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as… Affected: 5.0_s390x |
| CVE-2006-5170 | – | Oct 10 | pam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other distributions does not return an error condition when an LDAP directory server… Affected: 4.0_s390; 4.0_s390x |