Summary
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.
Product
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Vulnerabilities 54
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 …
KEV Apr 10, 2023 -
High 8.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7…
-
High 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, ma…
-
High 8.8
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13,…
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, …
-
High 8.8CVE-2022-42867 EPSS 35%
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, ma…
-
High 8.8
A memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, …
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, …
-
High 8.8
A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, …
-
High 8.8
A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerabilit…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…
-
High 8.8
A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute…
-
High 8.8
A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute…
-
High 8.8
A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to e…
-
High 7.5
golang.org/x/net/http2 Denial of Service vulnerability
In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.
-
High 7.5
NRDelegation Attack
A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The …
-
High 7.5
mako is vulnerable to Regular Expression Denial of Service
Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and linguaplugin.
-
High 7.0
sysstat Incorrect Buffer Size calculation on 32-bit systems results in RCE via buffer overflow
sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer but prior to 12.7.1, allocate_structures contains a size_t overflow in sa_common.c. The allocate_structures function insufficiently ch…
-
Medium 6.7
A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
-
Medium 6.7
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.
-
Medium 6.7
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.
-
Medium 6.7
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.
-
Medium 6.5
When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/r…
-
Medium 6.5
A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPa…
-
Medium 6.5
The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.…
-
Medium 6.5
A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.…
-
Medium 6.5
Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS p…
-
Medium 6.1
The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Saf…
-
Medium 5.9
FreeRDP may read and display out of bounds data
FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized data, decode it as audio/video and display the result. FreeRDP based server implementations are not a…
-
Medium 5.7
OAuthLib vulnerable DoS when attacker provides malicious IPV6 URI
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions…
-
Medium 5.5
Heap buffer overflow in urbdrc channel
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based clien…
-
Medium 5.5
A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS…
-
Medium 5.5
A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for W…
-
Medium 4.8
Out of bound read in FreeRDP
FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRDP. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it likely r…
-
Medium 4.8
Division by zero in urbdrc channel in FreeRDP
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in `urbdrc` channel. A malicious server can trick a FreeRDP based client to crash with division by zero. This issue has been addressed in …
-
Medium 4.6
Out of bounds read in zgfx decoder in FreeRDP
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing a range check for input offset index in ZGFX decoder. A malicious server can trick a FreeRDP based client to read out of bound data and try to decode it. T…
-
Medium 4.6
Missing length validation in urbdrc channel in FreeRDP
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in the `urbdrc` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the serv…
-
Medium 4.6
Missing input length validation in `drive` channel in FreeRDP
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. T…
-
Low 3.5
RDP client: Read of uninitialized memory with parallel port redirection
FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read uninitialized data and send it to the server the client is currently connected to. FreeRDP based server imple…
-
Low 2.6
Missing path sanitation with `drive` channel in FreeRDP
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for `drive` channel. A malicious server can trick a FreeRDP based client to read files outside the shared directo…
-
Unscored —
GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream o…
-
Unscored —
ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream posit…
-
Unscored —
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames …
-
Unscored —
singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, le…
-
Unscored —
AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.
-
Unscored —CVE-2022-34301 Public exploit
A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass …
-
Unscored —CVE-2022-34302 Public exploit
A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or…
-
Unscored —CVE-2022-34303 Public exploit
A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper wit…
-
Unscored —CVE-2022-37032 Public exploit
An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of serv…
-
Unscored —
multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction …
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1…
-
Unscored —
A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows att…
-
Unscored —
A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allow…
Revision history
-
#30
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#29
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#28
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#27
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#26
Neue Updates von Debian aufgenommen
-
#25
Neue Updates von openSUSE aufgenommen
-
#24
Neue Updates von Amazon aufgenommen
-
#23
Neue Updates von Red Hat aufgenommen
-
#22
Neue Updates von SUSE aufgenommen
-
#21
Neue Updates von Red Hat aufgenommen
-
#20
Neue Updates von Oracle Linux aufgenommen
-
#19
Neue Updates von Red Hat aufgenommen
-
#18
Neue Updates von Red Hat aufgenommen
-
#17
Neue Updates von Red Hat aufgenommen
-
#16
Neue Updates von Amazon aufgenommen
-
#15
Neue Updates von Amazon aufgenommen
-
#14
Neue Updates von Gentoo aufgenommen
-
#13
Neue Updates von Red Hat aufgenommen
-
#12
Neue Updates von Oracle Linux aufgenommen
-
#11
Neue Updates von Red Hat aufgenommen
-
#10
Neue Updates von Amazon aufgenommen
-
#9
Neue Updates von Fedora aufgenommen
-
#8
Neue Updates von Amazon aufgenommen
-
#7
Neue Updates von Red Hat aufgenommen
-
#6
Neue Updates von Ubuntu und Amazon aufgenommen
References
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2161
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2177
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2179
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2202
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2216
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2234
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2256
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2258
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2326
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2370
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2459
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2487
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2582
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2589
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2653
-
Red Hat Security Advisory vom 2023-05-09
https://access.redhat.com/errata/RHSA-2023:2633
-
Red Hat Security Advisory RHSA-2023:2893 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2893
-
Red Hat Security Advisory RHSA-2023:3067 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:3067
-
Red Hat Security Advisory RHSA-2023:2785 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2785
-
Red Hat Security Advisory RHSA-2023:2757 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2757
-
Red Hat Security Advisory RHSA-2023:3095 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:3095
-
Red Hat Security Advisory RHSA-2023:2948 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2948
-
Red Hat Security Advisory RHSA-2023:2780 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2780
-
Red Hat Security Advisory RHSA-2023:2771 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2771
-
Red Hat Security Advisory RHSA-2023:2851 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2851
-
Red Hat Security Advisory RHSA-2023:2834 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2834
-
Red Hat Security Advisory RHSA-2023:2801 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2801
-
Red Hat Security Advisory RHSA-2023:3108 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:3108
-
Red Hat Security Advisory RHSA-2023:2800 vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2800
-
Oracle Linux Security Advisory ELSA-2023-2633 vom 2023-05-18
https://oss.oracle.com/pipermail/el-errata/2023-May/013979.html
-
Oracle Linux Security Advisory ELSA-2023-2653 vom 2023-05-18
https://oss.oracle.com/pipermail/el-errata/2023-May/013982.html
-
Oracle Linux Security Advisory ELSA-2023-2851 vom 2023-05-24
https://linux.oracle.com/errata/ELSA-2023-2851.html
-
Oracle Linux Security Advisory ELSA-2023-2800 vom 2023-05-24
https://linux.oracle.com/errata/ELSA-2023-2800.html
-
Oracle Linux Security Advisory ELSA-2023-2893 vom 2023-05-24
https://linux.oracle.com/errata/ELSA-2023-2893.html
-
Oracle Linux Security Advisory ELSA-2023-2771 vom 2023-05-24
https://linux.oracle.com/errata/ELSA-2023-2771.html
-
Oracle Linux Security Advisory ELSA-2023-2785 vom 2023-05-24
https://linux.oracle.com/errata/ELSA-2023-2785.html
-
Oracle Linux Security Advisory ELSA-2023-3095 vom 2023-05-24
https://linux.oracle.com/errata/ELSA-2023-3095.html
-
Ubuntu Security Notice USN-6145-1 vom 2023-06-07
https://ubuntu.com/security/notices/USN-6145-1
-
Amazon Linux Security Advisory ALAS2-2023-2068 vom 2023-06-08
https://alas.aws.amazon.com/AL2/ALAS-2023-2068.html
-
Red Hat Security Advisory RHSA-2023:3609 vom 2023-06-15
https://access.redhat.com/errata/RHSA-2023:3609
-
Amazon Linux Security Advisory ALAS2-2023-2164 vom 2023-07-26
https://alas.aws.amazon.com/AL2/ALAS-2023-2164.html
-
Fedora Security Advisory FEDORA-2023-5AB7049A59 vom 2023-09-20
https://bodhi.fedoraproject.org/updates/FEDORA-2023-5ab7049a59
-
Fedora Security Advisory FEDORA-2023-DA094276A2 vom 2023-09-20
https://bodhi.fedoraproject.org/updates/FEDORA-2023-da094276a2
-
Fedora Security Advisory FEDORA-2023-49DED4C9A5 vom 2023-09-20
https://bodhi.fedoraproject.org/updates/FEDORA-2023-49ded4c9a5
-
Amazon Linux Security Advisory ALAS2-2023-2332 vom 2023-11-02
https://alas.aws.amazon.com/AL2/ALAS-2023-2332.html
-
Red Hat Security Advisory RHSA-2023:7189 vom 2023-11-15
https://access.redhat.com/errata/RHSA-2023:7189
-
Oracle Linux Security Advisory ELSA-2023-6980 vom 2023-11-21
https://linux.oracle.com/errata/ELSA-2023-6980.html
-
Red Hat Security Advisory RHSA-2023:5006 vom 2023-12-30
https://access.redhat.com/errata/RHSA-2023:5006
-
Gentoo Linux Security Advisory GLSA-202401-16 vom 2024-01-12
https://security.gentoo.org/glsa/202401-16
-
Amazon Linux Security Advisory ALAS-2024-2451 vom 2024-02-06
https://alas.aws.amazon.com/AL2/ALAS-2024-2451.html
-
Amazon Linux Security Advisory ALAS-2024-2467 vom 2024-02-19
https://alas.aws.amazon.com/AL2/ALAS-2024-2467.html
-
Red Hat Security Advisory RHSA-2024:1106 vom 2024-03-05
https://access.redhat.com/errata/RHSA-2024:1106
-
RedHat Security Advisory
https://access.redhat.com/errata/RHSA-2024:1110
-
Red Hat Security Advisory RHSA-2024:1403 vom 2024-03-19
https://access.redhat.com/errata/RHSA-2024:1403
-
Oracle Linux Security Advisory ELSA-2024-2033 vom 2024-04-25
http://linux.oracle.com/errata/ELSA-2024-2033.html
-
Red Hat Security Advisory RHSA-2024:2045 vom 2024-04-25
https://access.redhat.com/errata/RHSA-2024:2045
-
Red Hat Security Advisory RHSA-2024:4631 vom 2024-07-18
https://access.redhat.com/errata/RHSA-2024:4631
-
SUSE Security Update SUSE-SU-2024:3433-1 vom 2024-09-25
https://lists.suse.com/pipermail/sle-security-updates/2024-September/019518.html
-
Red Hat Security Advisory RHSA-2024:10594 vom 2024-12-02
https://access.redhat.com/errata/RHSA-2024:10594
-
Amazon Linux Security Advisory ALASNITRO-ENCLAVES-2025-059 vom 2025-04-29
https://alas.aws.amazon.com/AL2/ALASNITRO-ENCLAVES-2025-059.html
-
openSUSE Security Update OPENSUSE-SU-2025:15100-1 vom 2025-05-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/NIVGGZC7NXNK2PSSZ7J6S65CPD3PJJMY/
-
Debian Security Advisory DLA-4336 vom 2025-10-17
https://lists.debian.org/debian-lts-announce/2025/10/msg00017.html
-
Rocky Linux Security Advisory RLSA-2023:2802 vom 2025-11-28
https://errata.build.resf.org/RLSA-2023:2802
-
Rocky Linux Security Advisory RLSA-2023:2758 vom 2025-11-28
https://errata.build.resf.org/RLSA-2023:2758
-
Rocky Linux Security Advisory RLSA-2023:2258 vom 2025-12-03
https://errata.build.resf.org/RLSA-2023:2258
-
Rocky Linux Security Advisory RLSA-2023:2757 vom 2025-12-03
https://errata.build.resf.org/RLSA-2023:2757
-
Rocky Linux Security Advisory RLSA-2023:2893 vom 2025-12-03
https://errata.build.resf.org/RLSA-2023:2893
-
Rocky Linux Security Advisory RLSA-2023:2589 vom 2026-06-28
https://errata.build.resf.org/RLSA-2023:2589
-
Rocky Linux Security Advisory RLSA-2023:3067 vom 2026-06-28
https://errata.build.resf.org/RLSA-2023:3067
-
Rocky Linux Security Advisory RLSA-2023:2771 vom 2026-08-04
https://errata.build.resf.org/RLSA-2023:2771