Summary
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
Product
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Vulnerabilities 11
-
High 7.8
A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A cr…
-
High 7.5
GSS-NTLMSSP vulnerable to incorrect free when decoding target information
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target information can trigger a denial of service. The error condition incorrectly assumes the `cb` and `sh` …
-
High 7.5
GSS-NTLMSSP vulnerable to memory leak when parsing usernames
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsing usernames which can trigger a denial-of-service. The domain portion of a username may be overridde…
-
High 7.5
GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information
GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The length of the `av_pair` is not checked properly for two of the elements which can…
-
Medium 6.6
An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. T…
-
Medium 6.5
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of mall…
-
Medium 6.5
GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when decoding UTF16 strings. The variable `outlen` was not initialized and could cause writing a zero to an…
-
Medium 5.9
GSS-NTLMSSP vulnerable to multiple out-of-bounds reads when decoding NTLM fields
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit integer overflow condition can lead to incorr…
-
Unscored —
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of mall…
-
Unscored —
The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory…
-
Unscored —
The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory…
Revision history
-
#10
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#9
Neue Updates von openSUSE aufgenommen
-
#8
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#7
Neue Updates von Amazon aufgenommen
-
#6
Neue Updates von Debian aufgenommen
-
#5
Neue Updates von Amazon aufgenommen
-
#4
Neue Updates von Amazon aufgenommen
-
#3
Neue Updates von Oracle Linux aufgenommen
-
#2
Neue Updates von Oracle Linux aufgenommen
-
#1
Initiale Fassung
References
-
Red Hat Security Advisory vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2786
-
Red Hat Security Advisory vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2863
-
Red Hat Security Advisory vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:2898
-
Red Hat Security Advisory vom 2023-05-16
https://access.redhat.com/errata/RHSA-2023:3097
-
Oracle Linux Security Advisory ELSA-2023-2898 vom 2023-05-24
https://linux.oracle.com/errata/ELSA-2023-2898.html
-
Oracle Linux Security Advisory ELSA-2023-2863 vom 2023-05-24
https://linux.oracle.com/errata/ELSA-2023-2863.html
-
Oracle Linux Security Advisory ELSA-2023-3097 vom 2023-05-24
https://linux.oracle.com/errata/ELSA-2023-3097.html
-
Amazon Linux Security Advisory ALAS2-2023-2103 vom 2023-07-01
https://alas.aws.amazon.com/AL2/ALAS-2023-2103.html
-
Amazon Linux Security Advisory ALAS-2023-2343 vom 2023-11-16
https://alas.aws.amazon.com/AL2/ALAS-2023-2343.html
-
Debian Security Advisory DLA-4033 vom 2025-01-28
https://lists.debian.org/debian-lts-announce/2025/01/msg00026.html
-
Amazon Linux Security Advisory ALAS-2025-1974 vom 2025-04-30
https://alas.aws.amazon.com/ALAS-2025-1974.html
-
Rocky Linux Security Advisory RLSA-2023:2898 vom 2025-12-27
https://errata.build.resf.org/RLSA-2023:2898
-
openSUSE Security Update OPENSUSE-SU-2026:11092-1 vom 2026-06-25
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3EEENEEG7WR2TLLSYELU32U4QTG5BNBR/
-
Rocky Linux Security Advisory RLSA-2023:2786 vom 2026-06-27
https://errata.build.resf.org/RLSA-2023:2786