EL
Product
Enterprise Linux
On CISA KEVExploited in the wildRansomware-linked
1,952
CVEs
26
On KEV
9.9
Max CVSS
16
New 30D
Severity mix
Critical 151High 348Medium 1Low 0
Watch
Add Enterprise Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5367 | 7.8 | Oct 25 | A out-of-bounds write flaw was found in the xorg-x11-server Affected: 7.0; 8.0; 9.0 |
| CVE-2023-4692 | 7.8 | Oct 25 | An out-of-bounds write flaw was found in grub2's NTFS filesystem driver Affected: 8.0; 9.0 |
| CVE-2023-5633 | 7.8 | Oct 23 | The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being… Affected: 8.0; 9.0 |
| CVE-2023-43787 | 7.8 | Oct 10 | A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function Affected: 8.0; 9.0 |
| CVE-2023-42753 | 7.8 | Sep 25 | Kernel: netfilter: potential slab-out-of-bound access due to integer underflow Affected: 7.0; 8.0; 9.0 |
| CVE-2023-3899 | 7.8 | Aug 23 | A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization Affected: 8.0; 9.0 |
| CVE-2023-4147 | 7.8 | Aug 7 | A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID Affected: 9.0 |
| CVE-2023-4004 | 7.8 | Jul 31 | Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() Affected: 8.0; 9.0 |
| CVE-2023-3812 | 7.8 | Jul 24 | An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi… Affected: 8.0; 9.0 |
| CVE-2023-3640 | 7.8 | Jul 24 | A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception… Affected: 8.0; 9.0 |
| CVE-2023-3269 | 7.8 | Jul 11 | A vulnerability exists in the memory management subsystem of the Linux kernel Affected: 6.0; 7.0; 8.0; 9.0 |
| CVE-2023-34432 | 7.8 | Jul 10 | A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16 Affected: 6.0; 7.0 |
| CVE-2023-34318 | 7.8 | Jul 10 | A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41 Affected: 6.0; 7.0 |
| CVE-2023-2603 | 7.8 | Jun 6 | A vulnerability was found in libcap Affected: 8.0; 9.0 |
| CVE-2023-34153 | 7.8 | May 30 | A vulnerability was found in ImageMagick Affected: 6.0; 7.0 |
| CVE-2023-2491 | 7.8 | May 17 | A flaw was found in the Emacs text editor Affected: 8.0; 9.0 |
| CVE-2023-32233 | 7.8 | May 8 | In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel… Affected: 7.0; 8.0; 9.0 |
| CVE-2023-30549 | 7.8 | Apr 25 | Apptainer is an open source container platform for Linux Affected: 7.0 |
| CVE-2022-3787 | 7.8 | Mar 29 | A vulnerability was found in the device-mapper-multipath Affected: 8.7; 9.1 |
| CVE-2023-0664 | 7.8 | Mar 29 | A flaw was found in the QEMU Guest Agent service for Windows Affected: 7.0; 8.0; 9.0 |
| CVE-2023-0179 | 7.8 | Mar 27 | A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel Affected: 9.0 |
| CVE-2023-0494 | 7.8 | Mar 27 | A vulnerability was found in X.Org Affected: 8.0; 8.1; 9.0 |
| CVE-2022-3424 | 7.8 | Mar 6 | A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the… Affected: 9.0 |
| CVE-2022-3715 | 7.8 | Jan 5 | A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform Affected: 9.0 |
| CVE-2022-4283 | 7.8 | Dec 14 | A vulnerability was found in X.Org Affected: 6.0; 7.0; 8.0; 9.0 |
| CVE-2022-2964 | 7.8 | Sep 9 | A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices Affected: 7.0; 8.0; 9.0 |
| CVE-2022-25308 | 7.8 | Sep 6 | A stack-based buffer overflow flaw was found in the Fribidi package Affected: 8.0; 9.0 |
| CVE-2022-2639 | 7.8 | Sep 1 | An integer coercion error was found in the openvswitch kernel module Affected: 8.0; 9.0 |
| CVE-2022-0358 | 7.8 | Aug 29 | A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation Affected: 8.0 |
| CVE-2022-0135 | 7.8 | Aug 25 | An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer) Affected: 8.0 |
| CVE-2022-2938 | 7.8 | Aug 23 | A flaw was found in the Linux kernel's implementation of Pressure Stall Information Affected: 8.0 |
| CVE-2021-31566 | 7.8 | Aug 23 | An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive Affected: 8.0 |
| CVE-2021-23177 | 7.8 | Aug 23 | An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link Affected: 8.0 |
| CVE-2022-1158 | 7.8 | Aug 5 | A flaw was found in KVM Affected: 8.0; 9.0 |
| CVE-2022-32547 | 7.8 | Jun 16 | In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at… Affected: 6.0; 7.0 |
| CVE-2022-32546 | 7.8 | Jun 16 | A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is… Affected: 6.0; 7.0 |
| CVE-2022-32545 | 7.8 | Jun 16 | A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is… Affected: 7.0 |
| CVE-2022-1998 | 7.8 | Jun 9 | A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user() Affected: 9.0 |
| CVE-2022-1652 | 7.8 | Jun 2 | Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function Affected: 9.0 |
| CVE-2022-1304 | 7.8 | Apr 14 | An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5 Affected: 6.0; 7.0; 8.0 |
| CVE-2022-1055 | 7.8 | Mar 29 | A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation Affected: 8.0 |
| CVE-2022-0330 | 7.8 | Mar 25 | A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU Affected: 8.0 |
| CVE-2022-27666 | 7.8 | Mar 23 | A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c Affected: 8.0 |
| CVE-2022-1011 | 7.8 | Mar 18 | A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write() Affected: 6.0; 7.0; 8.0 |
| CVE-2022-0516 | 7.8 | Mar 10 | A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel Affected: 8.0 |
| CVE-2021-3575 | 7.8 | Mar 4 | A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file Affected: 6.0; 7.0; 8.0 |
| CVE-2021-26252 | 7.8 | Feb 24 | A flaw was found in htmldoc in v1.9.12 Affected: 7.0 |
| CVE-2021-3551 | 7.8 | Feb 16 | A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file Affected: 8.0 |
| CVE-2021-45417 | 7.8 | Jan 20 | AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow Affected: 6.0; 7.0; 8.0 |
| CVE-2021-45463 | 7.8 | Dec 23 | load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered Affected: 7.0; 8.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
