High WID-SEC-2024-0995 13 CVEs

Red Hat Enterprise Linux: Mehrere Schwachstellen

Published Apr 29, 2024 · Updated Nov 17, 2025 · Revision 15 · de-DE

Vendor: gentoo Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Rocky Linux Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder seine Privilegien zu erweitern.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 13

High 7.5

CVE-2024-24258

freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function.

mupdf freeglut freeglut freeglut Debian Ubuntu Azure Linux

Feb 5, 2024
High 7.5

CVE-2024-24259

freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry funct…

mupdf freeglut freeglut freeglut Debian Ubuntu Azure Linux

Feb 5, 2024
Medium 5.9

CVE-2023-49083

cryptography vulnerable to NULL-dereference when loading PKCS7 certificates

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerab…

pyca cryptography py3-cassandra-medusa mitmproxy Debian Ubuntu Azure Linux Wolfi PyPI

Nov 29, 2023
Medium 5.5

CVE-2024-22365

linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo…

pam pam pam linux-pam Debian Ubuntu Azure Linux Alpine

Feb 6, 2024
Medium 5.3

CVE-2023-5215

Libnbd: crash or misbehaviour when nbd server returns an unexpected block size

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the retu…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 8 Advanced Virtualization Linux Debian Ubuntu Azure Linux Alpine

Sep 28, 2023
Medium 5.3

CVE-2023-5871

Libnbd: malicious nbd server may crash libnbd

A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue may allow a malicious NBD server to cause a Denial of Service.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Nov 27, 2023
Medium 5.3

CVE-2024-1481

Freeipa: specially crafted http requests potentially lead to denial of service

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Apr 10, 2024
Unscored —

CVE-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.

Aug 22, 2023
Unscored —

CVE-2021-40153

squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by…

squashfs-tools squashfs-tools squashfs-tools squashfs-tools Debian Ubuntu Azure Linux Alpine

Aug 27, 2021
Unscored —

CVE-2021-41072

squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2…

squashfs-tools squashfs-tools squashfs-tools squashfs-tools Debian Ubuntu Azure Linux Alpine

Sep 14, 2021
Unscored —

CVE-2022-48554

File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open So…

file file file Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2023-1729

A flaw was found in LibRaw. A heap-buffer-overflow in raw2image_ex() caused by a maliciously crafted file may lead to a…

kodi dcraw libraw rawtherapee Debian Ubuntu Alpine

May 15, 2023
Unscored —

CVE-2023-41915

OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race co…

pmix pmix pmix Debian Ubuntu Azure Linux

Sep 9, 2023

Revision history

2025-11-17 #15
Neue Updates von Ubuntu aufgenommen
2025-10-09 #14
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
2025-09-16 #13
Neue Updates von Oracle Linux aufgenommen
2025-09-15 #12
Neue Updates von Red Hat aufgenommen
2025-08-26 #11
Neue Updates von Oracle Linux aufgenommen
2025-08-25 #10
Neue Updates von Red Hat aufgenommen
2025-08-05 #9
Neue Updates von Red Hat aufgenommen
2025-02-12 #8
Neue Updates von Ubuntu aufgenommen
2024-12-19 #7
Neue Updates von Oracle Linux aufgenommen
2024-12-11 #6
Neue Updates von Red Hat aufgenommen
2024-09-22 #5
Neue Updates von Gentoo aufgenommen
2024-07-09 #4
Neue Updates von SUSE aufgenommen
2024-05-28 #3
Neue Updates von Oracle Linux aufgenommen
2024-05-21 #2
Neue Updates von Red Hat aufgenommen
2024-04-29 #1
Initiale Fassung

References

Red Hat Security Advisory vom 2024-04-29
https://access.redhat.com/errata/RHSA-2024:2137
Red Hat Security Advisory vom 2024-04-29
https://access.redhat.com/errata/RHSA-2024:2147
Red Hat Security Advisory vom 2024-04-29
https://access.redhat.com/errata/RHSA-2024:2295
Red Hat Security Advisory vom 2024-04-29
https://access.redhat.com/errata/RHSA-2024:2337
Red Hat Security Advisory vom 2024-04-29
https://access.redhat.com/errata/RHSA-2024:2366
Red Hat Security Advisory vom 2024-04-29
https://access.redhat.com/errata/RHSA-2024:2396
Red Hat Security Advisory vom 2024-04-29
https://access.redhat.com/errata/RHSA-2024:2512
Red Hat Security Advisory vom 2024-04-29
https://access.redhat.com/errata/RHSA-2024:2199
Red Hat Security Advisory vom 2024-04-29
https://access.redhat.com/errata/RHSA-2024:2204
Red Hat Security Advisory vom 2024-04-29
https://access.redhat.com/errata/RHSA-2024:2438
Red Hat Security Advisory RHSA-2024:3105 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3105
Red Hat Security Advisory RHSA-2024:3120 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3120
Red Hat Security Advisory RHSA-2024:3044 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3044
Red Hat Security Advisory RHSA-2024:3139 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3139
Red Hat Security Advisory RHSA-2024:3163 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3163
Red Hat Security Advisory RHSA-2024:3008 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3008
Oracle Linux Security Advisory ELSA-2024-3044 vom 2024-05-28
https://linux.oracle.com/errata/ELSA-2024-3044.html
SUSE Security Update SUSE-SU-2024:0136-2 vom 2024-07-09
https://lists.suse.com/pipermail/sle-security-updates/2024-July/018909.html
SUSE Security Update SUSE-SU-2024:2375-1 vom 2024-07-09
https://lists.suse.com/pipermail/sle-security-updates/2024-July/018915.html
Gentoo Linux Security Advisory GLSA-202409-06 vom 2024-09-22
https://security.gentoo.org/glsa/202409-06
Red Hat Security Advisory RHSA-2024:10965 vom 2024-12-11
https://access.redhat.com/errata/RHSA-2024:10965
Oracle Linux Security Advisory ELSA-2024-11250 vom 2024-12-19
https://linux.oracle.com/errata/ELSA-2024-11250.html
Ubuntu Security Notice USN-7266-1 vom 2025-02-13
https://ubuntu.com/security/notices/USN-7266-1
Red Hat Security Advisory RHSA-2025:13098 vom 2025-08-06
https://access.redhat.com/errata/RHSA-2025:13098
Red Hat Security Advisory RHSA-2025:13100 vom 2025-08-06
https://access.redhat.com/errata/RHSA-2025:13100
Red Hat Security Advisory RHSA-2025:13101 vom 2025-08-06
https://access.redhat.com/errata/RHSA-2025:13101
Red Hat Security Advisory RHSA-2025:13103 vom 2025-08-06
https://access.redhat.com/errata/RHSA-2025:13103
Red Hat Security Advisory RHSA-2025:13104 vom 2025-08-06
https://access.redhat.com/errata/RHSA-2025:13104
Red Hat Security Advisory RHSA-2025:13102 vom 2025-08-06
https://access.redhat.com/errata/RHSA-2025:13102
Red Hat Security Advisory RHSA-2025:14553 vom 2025-08-26
https://access.redhat.com/errata/RHSA-2025:14553
Oracle Linux Security Advisory ELSA-2025-14553 vom 2025-08-26
https://linux.oracle.com/errata/ELSA-2025-14553.html
Red Hat Security Advisory RHSA-2025:15874 vom 2025-09-16
https://access.redhat.com/errata/RHSA-2025:15874
Oracle Linux Security Advisory ELSA-2025-15874 vom 2025-09-17
https://linux.oracle.com/errata/ELSA-2025-15874.html
Rocky Linux Security Advisory RLSA-2025:15874 vom 2025-10-10
https://errata.build.resf.org/RLSA-2025:15874
Ubuntu Security Notice USN-7870-1 vom 2025-11-18
https://ubuntu.com/security/notices/USN-7870-1