High WID-SEC-2026-0012 16 CVEs

Red Hat Enterprise Linux: Mehrere Schwachstellen

Published Sep 29, 2020 · Updated Jan 5, 2026 · Revision 12 · de-DE

Vendor: amazon Vendor: Avaya Vendor: Oracle Vendor: Red Hat Vendor: SUSE Product: Aura Application Enablement Services Product: Aura Communication Manager Product: Aura Experience Portal Product: Aura Session Manager Product: Aura System Manager Product: Enterprise Linux Product: Linux Product: Linux Product: Linux 2 Product: Web License Manager Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 16

High 8.4

CVE-2019-3695

pcp: Local privilege escalation from user pcp to root

A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE …

SUSE openSUSE openSUSE Leap 15.1 SUSE Linux Enterprise Server for SAP 15 Linux

Mar 3, 2020
High 8.4

CVE-2019-3696

pcp: Local privilege escalation from user pcp to root through migrate_tempdirs

A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Develo…

SUSE openSUSE openSUSE Leap 15.1 SUSE Linux Enterprise Server for SAP 15 Linux

Mar 3, 2020
High 7.5

CVE-2019-17400

Server-Side Request Forgery in unoconv

The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.

unoconv unoconv unoconv Debian Ubuntu PyPI

Oct 21, 2019
High 7.5

CVE-2019-3833 EPSS 15%

Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing spe…

[UNKNOWN] openwsman openwsman openwsman Ubuntu Azure Linux

Mar 14, 2019
Medium 5.1

CVE-2019-20386

An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigg…

systemd systemd Debian Ubuntu

Jan 21, 2020
Unscored —

CVE-2018-13440

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.…

audiofile audiofile audiofile Debian Ubuntu Azure Linux

Jul 8, 2018
Unscored —

CVE-2018-17095

An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.…

audiofile audiofile audiofile Debian Ubuntu Azure Linux

Sep 16, 2018
Unscored —

CVE-2019-16707

Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.

qt6-qtwebengine qtwebengine-opensource-src texmaker calibre Debian Ubuntu Alpine

Sep 23, 2019
Unscored —

CVE-2019-17402

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::Ciff…

exiv2 exiv2 exiv2 exiv2 Debian Ubuntu Azure Linux Alpine

Oct 9, 2019
Unscored —

CVE-2019-18609

An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow tha…

librabbitmq librabbitmq Debian Ubuntu

Dec 1, 2019
Unscored —

CVE-2020-0556

Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially ena…

Intel BlueZ bluez bluez Debian Ubuntu Alpine

Mar 12, 2020
Unscored —

CVE-2020-11761

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demons…

openexr openexr openexr OpenEXR Debian Ubuntu Azure Linux Alpine

Apr 14, 2020
Unscored —

CVE-2020-11763

An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated …

openexr openexr openexr OpenEXR Debian Ubuntu Azure Linux Alpine

Apr 14, 2020
Unscored —

CVE-2020-11764

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.

openexr openexr openexr OpenEXR Debian Ubuntu Azure Linux Alpine

Apr 14, 2020
Unscored —

CVE-2020-8631

cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predic…

cloud-init cloud-init Debian Ubuntu

Feb 5, 2020
Unscored —

CVE-2020-8632

In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value,…

cloud-init cloud-init Debian Ubuntu

Feb 5, 2020

Revision history

2026-01-05 #12
Neue Updates von Oracle Linux aufgenommen
2021-06-23 #11
Neue Updates von Amazon aufgenommen
2021-05-24 #10
Neue Updates von Amazon aufgenommen
2021-05-18 #9
Neue Updates von Red Hat aufgenommen
2021-03-21 #8
Neue Updates von Amazon aufgenommen
2020-12-07 #7
Neue Updates von AVAYA aufgenommen
2020-11-25 #6
Neue Updates von SUSE aufgenommen
2020-11-03 #5
Neue Updates von Red Hat aufgenommen
2020-10-26 #4
Neue Updates von SUSE aufgenommen
2020-10-20 #3
Neue Updates von SUSE aufgenommen
2020-10-14 #2
Neue Updates von AVAYA aufgenommen
2020-09-29 #1
Initiale Fassung

References

RedHat Security Advisory vom 2020-09-29
https://access.redhat.com/errata/RHSA-2020:3869
RedHat Security Advisory vom 2020-09-29
https://access.redhat.com/errata/RHSA-2020:3877
RedHat Security Advisory vom 2020-09-29
https://access.redhat.com/errata/RHSA-2020:3898
RedHat Security Advisory vom 2020-09-29
https://access.redhat.com/errata/RHSA-2020:3940
RedHat Security Advisory vom 2020-09-29
https://access.redhat.com/errata/RHSA-2020:3944
RedHat Security Advisory vom 2020-09-29
https://access.redhat.com/errata/RHSA-2020:3949
RedHat Security Advisory vom 2020-09-29
https://access.redhat.com/errata/RHSA-2020:3971
RedHat Security Advisory vom 2020-09-29
https://access.redhat.com/errata/RHSA-2020:4001
RedHat Security Advisory vom 2020-09-29
https://access.redhat.com/errata/RHSA-2020:4007
RedHat Security Advisory vom 2020-09-29
https://access.redhat.com/errata/RHSA-2020:4030
RedHat Security Advisory vom 2020-09-29
https://access.redhat.com/errata/RHSA-2020:4039
AVAYA Security Advisory ASA-2020-117 vom 2020-10-15
https://downloads.avaya.com/css/P8/documents/101071400
AVAYA Security Advisory ASA-2020-128 vom 2020-10-15
https://downloads.avaya.com/css/P8/documents/101071421
SUSE Security Update SUSE-SU-2020:2967-1 vom 2020-10-20
http://lists.suse.com/pipermail/sle-security-updates/2020-October/007591.html
SUSE Security Update SUSE-SU-2020:2966-1 vom 2020-10-20
http://lists.suse.com/pipermail/sle-security-updates/2020-October/007597.html
SUSE Security Update SUSE-SU-2020:3034-1 vom 2020-10-26
http://lists.suse.com/pipermail/sle-security-updates/2020-October/007623.html
Red Hat Security Advisory RHSA-2020:4481 vom 2020-11-04
https://access.redhat.com/errata/RHSA-2020:4481
Red Hat Security Advisory RHSA-2020:4445 vom 2020-11-04
https://access.redhat.com/errata/RHSA-2020:4445
Red Hat Security Advisory RHSA-2020:4650 vom 2020-11-04
https://access.redhat.com/errata/RHSA-2020:4650
Red Hat Security Advisory RHSA-2020:4689 vom 2020-11-04
https://access.redhat.com/errata/RHSA-2020:4689
Red Hat Security Advisory RHSA-2020:4553 vom 2020-11-04
https://access.redhat.com/errata/RHSA-2020:4553
SUSE Security Update SUSE-SU-2020:3516-1 vom 2020-11-25
https://lists.suse.com/pipermail/sle-security-updates/2020-November/007858.html
AVAYA Security Advisory ASA-2020-184 vom 2020-12-06
https://downloads.avaya.com/css/P8/documents/101072779
Amazon Linux Security Advisory ALAS-2021-1486 vom 2021-03-20
https://alas.aws.amazon.com/ALAS-2021-1486.html
Red Hat Security Advisory RHSA-2021:1758 vom 2021-05-18
https://access.redhat.com/errata/RHSA-2021:1758
Amazon Linux Security Advisory ALAS-2021-1643 vom 2021-05-24
https://alas.aws.amazon.com/AL2/ALAS-2021-1643.html
Amazon Linux Security Advisory ALAS-2021-1647 vom 2021-06-23
https://alas.aws.amazon.com/AL2/ALAS-2021-1647.html
Oracle Linux Security Advisory ELSA-2025-23457 vom 2026-01-06
https://linux.oracle.com/errata/ELSA-2025-23457.html