High WID-SEC-2024-1213 16 CVEs

Red Hat Enterprise Linux: Mehrere Schwachstellen

Published May 21, 2024 · Updated Sep 4, 2025 · Revision 8 · de-DE

Vendor: amazon Vendor: Fedora Vendor: Oracle Vendor: Red Hat Product: Enterprise Linux Product: Linux Product: Linux Product: Linux 2 Platform: Linux

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 16

Critical 9.8

CVE-2023-40414

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 10, iOS 17 and iPa…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jan 10, 2024
High 8.8

CVE-2023-39928

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page…

WebKit WebKit qtwebkit-source qtwebkit-opensource-src Browsers Debian Ubuntu

Oct 6, 2023
High 8.8

CVE-2023-42852

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 25, 2023
High 8.8

CVE-2024-23213

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPadOS 16.7.5…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jan 23, 2024
High 7.1

CVE-2014-1745

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows …

chromium-browser webkit2gtk wpewebkit Debian Ubuntu

May 21, 2014
High 7.0

CVE-2023-29483

Potential DoS via the Tudoor mechanism in eventlet and dnspython

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does n…

kubeflow-pipelines-visualization-server dnspython eventlet dnspython Debian Ubuntu Wolfi PyPI

Apr 11, 2024
Medium 6.5

CVE-2024-23206

An access issue was addressed with improved access restrictions. This issue is fixed in Safari 17.3, iOS 16.7.5 and iPa…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jan 23, 2024
Unscored —

CVE-2013-7488

perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loo…

libconvert-asn1-perl perl-convert-asn1 libconvert-asn1-perl Debian Ubuntu Alpine

Apr 7, 2020
Unscored —

CVE-2020-18651

Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier allows rem…

exempi exempi Debian Ubuntu

Aug 22, 2023
Unscored —

CVE-2020-18652

Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial…

exempi exempi Debian Ubuntu

Aug 22, 2023
Unscored —

CVE-2020-18770

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to …

zziplib zziplib zziplib Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2023-32359

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS…

Apple iOS and iPadOS qtwebkit-source qtwebkit-opensource-src iOS Debian Ubuntu

Oct 25, 2023
Unscored —

CVE-2023-41983

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Oct 25, 2023
Unscored —

CVE-2023-42883

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, iOS 17.2 …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Dec 12, 2023
Unscored —

CVE-2023-42890

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Dec 12, 2023
Unscored —

CVE-2023-43361

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a den…

vorbis-tools vorbis-tools vorbis-tools vorbis-tools Debian Ubuntu Azure Linux Alpine

Oct 2, 2023

Revision history

2025-09-04 #8
Neue Updates von Amazon aufgenommen
2024-11-11 #7
Neue Updates von Red Hat aufgenommen
2024-10-31 #6
Neue Updates von Amazon aufgenommen
2024-08-07 #5
Neue Updates von Red Hat aufgenommen
2024-06-12 #4
Neue Updates von Fedora aufgenommen
2024-06-10 #3
Neue Updates von Red Hat aufgenommen
2024-05-30 #2
Neue Updates von Oracle Linux und Red Hat aufgenommen
2024-05-21 #1
Initiale Fassung

References

Red Hat Security Advisory RHSA-2024:2982 vom 2024-05-21
https://access.redhat.com/errata/RHSA-2024:2982
Red Hat Security Advisory RHSA-2024:3049 vom 2024-05-21
https://access.redhat.com/errata/RHSA-2024:3049
Red Hat Security Advisory RHSA-2024:3066 vom 2024-05-21
https://access.redhat.com/errata/RHSA-2024:3066
Red Hat Security Advisory RHSA-2024:3095 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3095
Red Hat Security Advisory RHSA-2024:3127 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3127
Red Hat Security Advisory RHSA-2024:3275 vom 2024-05-22
https://access.redhat.com/errata/RHSA-2024:3275
Oracle Linux Security Advisory ELSA-2024-3275 vom 2024-05-30
http://linux.oracle.com/errata/ELSA-2024-3275.html
Red Hat Security Advisory RHSA-2024:3483 vom 2024-05-30
https://access.redhat.com/errata/RHSA-2024:3483
Red Hat Security Advisory RHSA-2024:3790 vom 2024-06-11
https://access.redhat.com/errata/RHSA-2024:3790
Fedora Security Advisory FEDORA-2024-3B4C7849AB vom 2024-06-13
https://bodhi.fedoraproject.org/updates/FEDORA-2024-3b4c7849ab
Red Hat Security Advisory RHSA-2024:4960 vom 2024-08-07
https://access.redhat.com/errata/RHSA-2024:4960
Amazon Linux Security Advisory ALAS-2024-2689 vom 2024-11-01
https://alas.aws.amazon.com/AL2/ALAS-2024-2689.html
Red Hat Security Advisory RHSA-2024:9423 vom 2024-11-12
https://access.redhat.com/errata/RHSA-2024:9423
Amazon Linux Security Advisory ALAS2-2025-2983 vom 2025-09-04
https://alas.aws.amazon.com/AL2/ALAS2-2025-2983.html