EL
Product
Enterprise Linux Server
On CISA KEVExploited in the wildRansomware-linked
1,886
CVEs
59
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 263High 233Medium 4Low 0
Watch
Add Enterprise Linux Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9577 | 8.8 | Jul 27 | A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling Affected: 6.0; 7.0 |
| CVE-2017-12173 | 8.8 | Jul 27 | It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection Affected: 6.0; 7.0 |
| CVE-2018-5007 | 8.8 | Jul 20 | Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability Affected: 6.0 |
| CVE-2018-4945 | 8.8 | Jul 9 | Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability Affected: 6.0 |
| CVE-2018-5158 | 8.8 | Jun 11 | The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file Affected: 6.0; 7.0 |
| CVE-2018-5146 | 8.8 | Jun 11 | An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest Affected: 6.0; 7.0 |
| CVE-2018-5130 | 8.8 | Jun 11 | When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered Affected: 6.0; 7.0 |
| CVE-2018-5127 | 8.8 | Jun 11 | A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script Affected: 6.0; 7.0 |
| CVE-2018-5125 | 8.8 | Jun 11 | Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6 Affected: 6.0; 7.0 |
| CVE-2017-7846 | 8.8 | Jun 11 | It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g Affected: 6.0; 7.0 |
| CVE-2017-7798 | 8.8 | Jun 11 | The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code Affected: 6.0; 7.0 |
| CVE-2017-7752 | 8.8 | Jun 11 | A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are handled Affected: 6.0; 7.0 |
| CVE-2017-5436 | 8.8 | Jun 11 | An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font Affected: 6.0; 7.0 |
| CVE-2016-9905 | 8.8 | Jun 11 | A potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents Affected: 5.0; 6.0; 7.0 |
| CVE-2017-7000 | 8.8 | Apr 3 | An issue was discovered in certain Apple products Affected: 6.0 |
| CVE-2018-8905 | 8.8 | Mar 22 | In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps Affected: 7.0 |
| CVE-2014-8129 | 8.8 | Mar 12 | LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by… Affected: 6.0; 7.0 |
| CVE-2018-7550 | 8.8 | Mar 1 | The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value… Affected: 7.0 |
| CVE-2018-6560 | 8.8 | Feb 2 | In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because… Affected: 7.0 |
| CVE-2017-17405 | 8.8 | Dec 15 | Ruby before 2.4.3 allows Net::FTP command injection Affected: 7.0 |
| CVE-2017-5121 | 8.8 | Oct 27 | Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a… Affected: 6.0 |
| CVE-2017-5116 | 8.8 | Oct 27 | Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a… Affected: 6.0 |
| CVE-2017-5114 | 8.8 | Oct 27 | Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to… Affected: 6.0 |
| CVE-2017-5113 | 8.8 | Oct 27 | Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap… Affected: 6.0 |
| CVE-2017-5111 | 8.8 | Oct 27 | A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF… Affected: 6.0 |
| CVE-2017-5108 | 8.8 | Oct 27 | Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a… Affected: 6.0 |
| CVE-2017-5100 | 8.8 | Oct 27 | A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page Affected: 6.0 |
| CVE-2017-5098 | 8.8 | Oct 27 | A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted… Affected: 6.0 |
| CVE-2017-5095 | 8.8 | Oct 27 | Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF… Affected: 6.0 |
| CVE-2017-5091 | 8.8 | Oct 27 | A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a… Affected: 6.0 |
| CVE-2017-5088 | 8.8 | Oct 27 | Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to… Affected: 6.0 |
| CVE-2017-5087 | 8.8 | Oct 27 | A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5078 | 8.8 | Oct 27 | Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform… Affected: 6.0 |
| CVE-2017-5077 | 8.8 | Oct 27 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to… Affected: 6.0 |
| CVE-2017-5073 | 8.8 | Oct 27 | Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an… Affected: 6.0 |
| CVE-2017-5063 | 8.8 | Oct 27 | A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5062 | 8.8 | Oct 27 | A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform… Affected: 6.0 |
| CVE-2017-5059 | 8.8 | Oct 27 | Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code… Affected: 6.0 |
| CVE-2017-5057 | 8.8 | Oct 27 | Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5056 | 8.8 | Oct 27 | A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5054 | 8.8 | Oct 27 | An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory… Affected: 6.0 |
| CVE-2017-5052 | 8.8 | Oct 27 | An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote… Affected: 6.0 |
| CVE-2017-5208 | 8.8 | Aug 22 | Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which… Affected: 7.0 |
| CVE-2017-9462 | 8.8 | Jun 6 | In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a… Affected: 6.0; 7.0 |
| CVE-2016-9842 | 8.8 | May 23 | The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers Affected: 6.0; 7.0 |
| CVE-2016-9840 | 8.8 | May 23 | inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: 6.0; 7.0 |
| CVE-2017-5043 | 8.8 | Apr 24 | Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds… Affected: 6.0 |
| CVE-2017-5029 | 8.8 | Apr 24 | The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android,… Affected: 6.0 |
| CVE-2016-7545 | 8.8 | Jan 19 | SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call Affected: 6.0; 7.0 |
| CVE-2016-7865 | 8.8 | Nov 8 | Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability Affected: 5.0; 6.0 |
The 500 most important CVEs for this product (exploited first, then by severity)