EL
Product
Enterprise Linux Server Update Services For Sap Solutions
On CISA KEVExploited in the wildRansomware-linked
43
CVEs
6
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 25Medium 14Low 1
Watch
Add Enterprise Linux Server Update Services For Sap Solutions to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40438 RansomwareIn wildKEV | 9.0 | Sep 16 | mod_proxy SSRF Affected: 7.6; 7.7 |
| CVE-2019-8720 In wildKEV | 8.8 | Mar 6 | WebKitGTK Memory Corruption Vulnerability Affected: 8.4; 8.6 |
| CVE-2017-12615 RansomwareIn wildKEV | 8.1 | Sep 19 | When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g Affected: 7.4; 7.6; 7.7 |
| CVE-2022-0847 In wildKEV | 7.8 | Mar 7 | Linux Kernel Privilege Escalation Vulnerability Affected: 8.1; 8.2; 8.4 |
| CVE-2022-0492 In wildKEV | 7.8 | Mar 3 | Linux Kernel Improper Authentication Vulnerability Affected: 8.1; 8.2 |
| CVE-2021-4034 RansomwareIn wildKEV | 7.8 | Jan 28 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Affected: 7.6; 7.7 |
| CVE-2022-24805 | 8.8 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.2 |
| CVE-2022-4254 | 8.8 | Feb 1 | sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters Affected: 8.1 |
| CVE-2022-1227 | 8.8 | Apr 29 | A privilege escalation flaw was found in Podman Affected: 8.6 |
| CVE-2022-0435 | 8.8 | Mar 25 | A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes… Affected: 8.2; 8.4 |
| CVE-2021-3656 | 8.8 | Mar 4 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization Affected: 7.6; 7.7; 8.1; 8.2; 8.4 |
| CVE-2021-44142 | 8.8 | Feb 21 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP… Affected: 8.1; 8.2; 8.4 |
| CVE-2022-2601 | 8.6 | Dec 14 | A buffer overflow was found in grub_font_construct_glyph() Affected: 8.1; 8.2; 9.0 |
| CVE-2020-25717 | 8.1 | Feb 18 | A flaw was found in the way Samba maps domain users to local users Affected: 8.2; 8.4 |
| CVE-2023-3972 | 7.8 | Nov 1 | A vulnerability was found in insights-client Affected: 9.2 |
| CVE-2023-3899 | 7.8 | Aug 23 | A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization Affected: 9.0; 9.2 |
| CVE-2023-0494 | 7.8 | Mar 27 | A vulnerability was found in X.Org Affected: 8.2 |
| CVE-2022-0330 | 7.8 | Mar 25 | A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU Affected: 7.7 |
| CVE-2022-1011 | 7.8 | Mar 18 | A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write() Affected: 8.6 |
| CVE-2022-0516 | 7.8 | Mar 10 | A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel Affected: 8.4 |
| CVE-2021-3551 | 7.8 | Feb 16 | A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file Affected: 8.4 |
| CVE-2022-27649 | 7.5 | Apr 4 | A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions Affected: 8.4; 8.6 |
| CVE-2020-9490 | 7.5 | Aug 7 | Apache HTTP Server versions 2.4.20 to 2.4.43 Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-19906 | 7.5 | Dec 19 | cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet Affected: 8.4 |
| CVE-2020-25719 | 7.2 | Feb 18 | A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication Affected: 8.2; 8.4 |
| CVE-2021-3609 | 7.0 | Mar 3 | .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or… Affected: 8.1; 8.2; 8.4 |
| CVE-2022-24809 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.2 |
| CVE-2022-24808 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.2 |
| CVE-2022-24807 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.2 |
| CVE-2023-5455 | 6.5 | Jan 10 | A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA Affected: 8.2; 8.6; 9.0; 9.2 |
| CVE-2021-3733 | 6.5 | Mar 7 | There's a flaw in urllib's AbstractBasicAuthHandler class Affected: 8.4 |
| CVE-2020-14301 | 6.5 | May 27 | An information disclosure vulnerability was found in libvirt in versions before 6.3.0 Affected: 8.4 |
| CVE-2024-3049 | 5.9 | Jun 6 | A flaw was found in Booth, a cluster ticket manager Affected: 8.4 |
| CVE-2016-2124 | 5.9 | Feb 18 | A flaw was found in the way samba implemented SMB1 authentication Affected: 8.2; 8.4 |
| CVE-2021-3672 | 5.6 | Nov 23 | A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might… Affected: 8.1; 8.2; 8.4 |
| CVE-2021-3744 | 5.5 | Mar 4 | A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory… Affected: 8.6 |
| CVE-2019-6454 | 5.5 | Mar 17 | An issue was discovered in sd-bus in systemd 239 Affected: 7.3; 7.4; 8.0; 8.1; 8.2 |
| CVE-2022-24806 | 5.3 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.2 |
| CVE-2017-15129 | 4.7 | Jan 9 | A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11 Affected: 7.4 |
| CVE-2019-15718 | 4.4 | Sep 4 | In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted,… Affected: 8.1; 8.2; 8.4 |
| CVE-2018-16866 | 3.3 | Jan 11 | An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':' Affected: 7.4; 7.6 |
| CVE-2015-3214 | – | Aug 31 | The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS… Affected: 7.2; 7.3; 7.4; 7.6; 7.7 |
| CVE-2015-5165 | – | Aug 12 | The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via… Affected: 7.2; 7.3; 7.4; 7.6; 7.7 |
Showing 43