Medium WID-SEC-2024-3409 6 CVEs

Red Hat Enterprise Linux: Mehrere Schwachstellen

Published Nov 11, 2024 · Updated Sep 1, 2026 · Revision 12 · de-DE

Vendor: Dell Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: openshift Product: Secure Connect Gateway

Summary

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen preiszugeben und Daten zu manipulieren.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 6

Critical 9.1

CVE-2024-29039

Missing check in tpm2_checkquote allows attackers to misrepresent the TPM state

tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to manipulate tpm2_checkquote outputs by altering the TPML_PCR_SELECTION in the PCR input file. As a result, digest values are incorrectly mapped…

tpm2-software tpm2-tools tpm2-tools tpm2-tools Debian Ubuntu Azure Linux Alpine

Jun 28, 2024
Medium 5.9

CVE-2024-2236

Libgcrypt: vulnerable to marvin attack

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi

Mar 6, 2024
Medium 5.3

CVE-2023-6681

Jwcrypto: denail of service via specifically crafted jwe

A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational cons…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine PyPI

Feb 12, 2024
Medium 4.3

CVE-2024-29038

tpm2 does not detect if quote was not generated by TPM

tpm2-tools is the source repository for the Trusted Platform Module (TPM2.0) tools. A malicious attacker can generate arbitrary quote data which is not detected by `tpm2 checkquote`. This issue was patched in version 5.7.

tpm2-software tpm2-tools tpm2-tools tpm2-tools Debian Ubuntu Azure Linux Alpine

Jun 28, 2024
Low 3.2

CVE-2024-6126

Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option

A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Jul 3, 2024
Low 3.1

CVE-2024-6501

Networkmanager: denial of service

A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of serv…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Jul 9, 2024

Revision history

2026-09-01 #12
Neue Updates von Ubuntu aufgenommen
2025-11-04 #11
Neue Updates von Dell aufgenommen
2025-08-06 #10
Neue Updates von SUSE aufgenommen
2025-08-05 #9
Neue Updates von SUSE aufgenommen
2025-08-03 #8
Neue Updates von SUSE aufgenommen
2025-07-27 #7
Neue Updates von SUSE aufgenommen
2025-07-21 #6
Neue Updates von SUSE aufgenommen
2025-04-02 #5
Neue Updates von Red Hat aufgenommen
2025-01-14 #4
Neue Updates von Red Hat aufgenommen
2024-11-20 #3
Neue Updates von Red Hat aufgenommen
2024-11-18 #2
Neue Updates von Oracle Linux aufgenommen
2024-11-11 #1
Initiale Fassung

References

Red Hat Security Advisory vom 2024-11-11
https://access.redhat.com/errata/RHSA-2024:9281
Red Hat Security Advisory vom 2024-11-11
https://access.redhat.com/errata/RHSA-2024:9317
Red Hat Security Advisory vom 2024-11-11
https://access.redhat.com/errata/RHSA-2024:9325
Red Hat Security Advisory vom 2024-11-11
https://access.redhat.com/errata/RHSA-2024:9424
Red Hat Security Advisory vom 2024-11-11
https://access.redhat.com/errata/RHSA-2024:9404
Oracle Linux Security Advisory ELSA-2024-9281 vom 2024-11-19
https://linux.oracle.com/errata/ELSA-2024-9281.html
Red Hat Security Advisory RHSA-2024:10135 vom 2024-11-21
https://access.redhat.com/errata/RHSA-2024:10135
Red Hat Security Advisory RHSA-2024:10990 vom 2025-01-15
https://access.redhat.com/errata/RHSA-2024:10990
Red Hat Security Advisory RHSA-2025:3530 vom 2025-04-02
https://access.redhat.com/errata/RHSA-2025:3530
Red Hat Security Advisory RHSA-2025:3534 vom 2025-04-02
https://access.redhat.com/errata/RHSA-2025:3534
SUSE Security Update SUSE-SU-2025:02447-1 vom 2025-07-21
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BBICIXZ7THEGXAYHC2PBY5N3EQIOTMZS/
SUSE Security Update SUSE-SU-2025:20490-1 vom 2025-07-25
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021970.html
SUSE Security Update SUSE-SU-2025:02464-2 vom 2025-08-01
https://lists.suse.com/pipermail/sle-security-updates/2025-August/022001.html
SUSE Security Update SUSE-SU-2025:20538-1 vom 2025-08-05
https://lists.suse.com/pipermail/sle-security-updates/2025-August/022106.html
SUSE Security Update SUSE-SU-2025:02719-1 vom 2025-08-07
https://lists.suse.com/pipermail/sle-security-updates/2025-August/022113.html
Dell Security Advisory DSA-2025-390 vom 2025-11-05
https://www.dell.com/support/kbdoc/000385230
Ubuntu Security Notice USN-8711-1 vom 2026-09-01
https://ubuntu.com/security/notices/USN-8711-1