EL
Product
Enterprise Linux Server Tus
On CISA KEVExploited in the wildRansomware-linked
765
CVEs
21
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 106High 264Medium 130Low 0
Watch
Add Enterprise Linux Server Tus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-31566 | 7.8 | Aug 23 | An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive Affected: 8.6 |
| CVE-2021-23177 | 7.8 | Aug 23 | An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link Affected: 8.6 |
| CVE-2022-0330 | 7.8 | Mar 25 | A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU Affected: 7.7; 8.2; 8.4 |
| CVE-2022-1011 | 7.8 | Mar 18 | A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write() Affected: 8.6 |
| CVE-2022-0516 | 7.8 | Mar 10 | A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel Affected: 8.4 |
| CVE-2021-3551 | 7.8 | Feb 16 | A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file Affected: 8.4 |
| CVE-2014-8141 | 7.8 | Jan 31 | Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t… Affected: 6.6; 7.3; 7.6; 7.7 |
| CVE-2014-8140 | 7.8 | Jan 31 | Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t… Affected: 6.6; 7.3; 7.6; 7.7 |
| CVE-2014-8139 | 7.8 | Jan 31 | Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command… Affected: 6.6; 7.3; 7.6; 7.7 |
| CVE-2014-7844 | 7.8 | Jan 14 | BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address Affected: 6.6; 7.3; 7.6; 7.7 |
| CVE-2019-10216 | 7.8 | Nov 27 | In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions Affected: 7.7 |
| CVE-2019-14815 | 7.8 | Nov 25 | A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver Affected: 8.2; 8.4; 8.6 |
| CVE-2019-0155 | 7.8 | Nov 14 | Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor… Affected: 7.2 |
| CVE-2017-5333 | 7.8 | Nov 4 | Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a denial of service (process… Affected: 7.3; 7.6; 7.7 |
| CVE-2017-5332 | 7.8 | Nov 4 | The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service… Affected: 7.3; 7.6; 7.7 |
| CVE-2019-14816 | 7.8 | Sep 20 | There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of… Affected: 7.3; 7.6; 8.2; 8.4 |
| CVE-2019-14814 | 7.8 | Sep 20 | There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial… Affected: 8.2; 8.4 |
| CVE-2019-14835 | 7.8 | Sep 17 | A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer… Affected: 7.2; 7.3; 7.4; 7.6; 7.7 |
| CVE-2019-10168 | 7.8 | Aug 2 | The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the… Affected: 7.6 |
| CVE-2019-10167 | 7.8 | Aug 2 | The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing… Affected: 7.6 |
| CVE-2019-10166 | 7.8 | Aug 2 | It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would… Affected: 7.6 |
| CVE-2019-13313 | 7.8 | Jul 5 | libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line Affected: 8.2; 8.4; 8.6 |
| CVE-2018-16877 | 7.8 | Apr 18 | A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0 Affected: 8.2; 8.4; 8.6 |
| CVE-2019-6116 | 7.8 | Mar 19 | In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution Affected: 7.6 |
| CVE-2019-7221 | 7.8 | Mar 17 | The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free Affected: 7.6 |
| CVE-2019-7548 | 7.8 | Feb 6 | SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled Affected: 8.2; 8.4 |
| CVE-2019-7310 | 7.8 | Feb 3 | In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of… Affected: 8.2; 8.4 |
| CVE-2018-16865 | 7.8 | Jan 11 | An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the… Affected: 7.3; 7.6 |
| CVE-2018-16864 | 7.8 | Jan 11 | An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command… Affected: 7.3; 7.6 |
| CVE-2018-9568 | 7.8 | Dec 6 | In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion Affected: 7.6 |
| CVE-2018-16863 | 7.8 | Dec 3 | It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509 Affected: 7.6 |
| CVE-2018-19477 | 7.8 | Nov 23 | psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion Affected: 7.6 |
| CVE-2018-19476 | 7.8 | Nov 23 | psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type confusion Affected: 7.6 |
| CVE-2018-19475 | 7.8 | Nov 23 | psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked when the device… Affected: 7.6 |
| CVE-2018-12379 | 7.8 | Oct 18 | When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash Affected: 7.6 |
| CVE-2018-18445 | 7.8 | Oct 17 | In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses… Affected: 7.6 |
| CVE-2018-17183 | 7.8 | Sep 19 | Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite… Affected: 7.6 |
| CVE-2018-16802 | 7.8 | Sep 10 | An issue was discovered in Artifex Ghostscript before 9.25 Affected: 7.6 |
| CVE-2018-16540 | 7.8 | Sep 5 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice handling to crash the… Affected: 7.6 |
| CVE-2018-16511 | 7.8 | Sep 5 | An issue was discovered in Artifex Ghostscript before 9.24 Affected: 7.6 |
| CVE-2018-15911 | 7.8 | Aug 28 | In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter… Affected: 7.6 |
| CVE-2018-15909 | 7.8 | Aug 27 | In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the… Affected: 7.6 |
| CVE-2016-9583 | 7.8 | Aug 1 | An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input Affected: 7.3; 7.6 |
| CVE-2018-13405 | 7.8 | Jul 6 | The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory… Affected: 7.2; 7.3; 7.4 |
| CVE-2018-1087 | 7.8 | May 15 | kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor… Affected: 7.2; 7.3; 7.4 |
| CVE-2018-10675 | 7.8 | May 2 | The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified… Affected: 6.6; 7.2; 7.3; 7.4; 7.6 |
| CVE-2018-10194 | 7.8 | Apr 18 | The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning… Affected: 7.7 |
| CVE-2018-1000156 | 7.8 | Apr 6 | GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution Affected: 6.6; 7.2; 7.3; 7.4; 7.6 |
| CVE-2018-7566 | 7.8 | Mar 30 | The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user Affected: 7.6 |
| CVE-2018-6927 | 7.8 | Feb 12 | The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified… Affected: 7.6 |
The 500 most important CVEs for this product (exploited first, then by severity)