EL
Product
Enterprise Linux Server Tus
On CISA KEVExploited in the wildRansomware-linked
765
CVEs
21
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 106High 264Medium 130Low 0
Watch
Add Enterprise Linux Server Tus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0762 | 5.9 | Aug 10 | The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied… Affected: 7.6; 7.7 |
| CVE-2017-10135 | 5.9 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 7.3; 7.4; 7.6; 7.7 |
| CVE-2015-7852 | 5.9 | Aug 7 | ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets Affected: 7.3; 7.6; 7.7 |
| CVE-2016-2775 | 5.9 | Jul 19 | ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of… Affected: 7.2; 7.3; 7.6; 7.7 |
| CVE-2015-3152 | 5.9 | May 16 | Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows… Affected: 7.3; 7.6; 7.7 |
| CVE-2021-3672 | 5.6 | Nov 23 | A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might… Affected: 8.2; 8.4 |
| CVE-2019-1125 | 5.6 | Sep 3 | An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory Affected: 7.7 |
| CVE-2019-3887 | 5.6 | Apr 9 | A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled Affected: 8.2; 8.4 |
| CVE-2018-3180 | 5.6 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE) Affected: 7.6 |
| CVE-2017-3265 | 5.6 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 7.6; 7.7 |
| CVE-2024-1062 | 5.5 | Feb 12 | A heap overflow flaw was found in 389-ds-base Affected: 8.6; 8.8 |
| CVE-2021-3669 | 5.5 | Aug 26 | A flaw was found in the Linux kernel Affected: 8.6 |
| CVE-2021-3659 | 5.5 | Aug 22 | A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection Affected: 8.6 |
| CVE-2021-3744 | 5.5 | Mar 4 | A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory… Affected: 8.6 |
| CVE-2014-0148 | 5.5 | Feb 11 | Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for… Affected: 6.5 |
| CVE-2019-2819 | 5.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit) Affected: 8.2; 8.4; 8.6 |
| CVE-2019-11833 | 5.5 | May 15 | fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive… Affected: 8.2; 8.4; 8.6 |
| CVE-2019-11459 | 5.5 | Apr 22 | The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from… Affected: 8.2; 8.4; 8.6 |
| CVE-2019-3838 | 5.5 | Mar 25 | It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27 Affected: 7.6 |
| CVE-2019-3835 | 5.5 | Mar 25 | It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27 Affected: 7.6 |
| CVE-2019-7222 | 5.5 | Mar 17 | The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak Affected: 8.2; 8.4; 8.6 |
| CVE-2019-6454 | 5.5 | Mar 17 | An issue was discovered in sd-bus in systemd 239 Affected: 7.3; 7.4; 7.6; 8.2; 8.4 |
| CVE-2019-7664 | 5.5 | Feb 9 | In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check Affected: 8.2; 8.4; 8.6 |
| CVE-2019-7665 | 5.5 | Feb 9 | In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf Affected: 8.2; 8.4 |
| CVE-2019-7150 | 5.5 | Jan 29 | An issue was discovered in elfutils 0.175 Affected: 8.2; 8.4 |
| CVE-2019-2436 | 5.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 8.2; 8.4; 8.6 |
| CVE-2018-18397 | 5.5 | Dec 12 | The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data… Affected: 7.4; 7.6 |
| CVE-2018-14646 | 5.5 | Nov 26 | The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file Affected: 7.6 |
| CVE-2018-12383 | 5.5 | Oct 18 | If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible Affected: 7.6 |
| CVE-2018-17972 | 5.5 | Oct 3 | An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11 Affected: 7.6 |
The 500 most important CVEs for this product (exploited first, then by severity)