7.4 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2019-1010238	787	Exec Code Overflow	2019-07-19	2022-04-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.
2	CVE-2019-11478	400	DoS	2019-06-19	2020-10-20	5.0	None	Remote	Low	Not required	None	None	Partial
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.
3	CVE-2019-11477	190	DoS Overflow	2019-06-19	2020-10-20	7.8	None	Remote	Low	Not required	None	None	Complete
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.
4	CVE-2019-6454	787	DoS	2019-03-21	2022-02-20	4.9	None	Local	Low	Not required	None	None	Complete
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
5	CVE-2019-0223			2019-04-23	2022-04-22	5.8	None	Remote	Medium	Not required	Partial	Partial	None
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS even when configured to verify the peer certificate while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
6	CVE-2018-16871	476		2019-07-30	2022-04-11	5.0	None	Remote	Low	Not required	None	None	Partial
A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.
7	CVE-2018-14633	787	Overflow	2018-09-25	2020-08-28	8.3	None	Remote	Medium	Not required	Partial	Partial	Complete
A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 17 bytes of the stack. The attack requires the iSCSI target to be enabled on the victim host. Depending on how the target's code was built (i.e. depending on a compiler, compile flags and hardware architecture) an attack may lead to a system crash and thus to a denial-of-service or possibly to a non-authorized access to data exported by an iSCSI target. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is highly unlikely. Kernel versions 4.18.x, 4.14.x and 3.10.x are believed to be vulnerable.
8	CVE-2018-13405	269		2018-07-06	2022-04-06	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID.
9	CVE-2018-8088		Bypass	2018-03-20	2022-01-31	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.
10	CVE-2018-3693		Overflow	2018-07-10	2022-04-18	4.7	None	Local	Medium	Not required	Complete	None	None
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
11	CVE-2018-3639	203	Bypass	2018-05-22	2021-08-13	2.1	None	Local	Low	Not required	Partial	None	None
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
12	CVE-2017-18017	416	DoS Mem. Corr.	2018-01-03	2022-04-22	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
13	CVE-2017-12613	125	DoS	2017-10-24	2022-04-18	3.6	None	Local	Low	Not required	Partial	None	Partial
When apr_time_exp() or apr_os_exp_time() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
14	CVE-2017-10664		DoS	2017-08-02	2021-08-04	5.0	None	Remote	Low	Not required	None	None	Partial
qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.
15	CVE-2017-7847	200	+Info	2018-06-11	2018-08-07	4.3	None	Remote	Medium	Not required	Partial	None	None
Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird < 52.5.2.
16	CVE-2017-7829	20		2018-06-11	2018-08-07	5.0	None	Remote	Low	Not required	None	Partial	None
It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird < 52.5.2.
17	CVE-2017-7824	119	Overflow	2018-06-11	2018-08-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.
18	CVE-2017-7668	125		2017-06-20	2022-04-21	5.0	None	Remote	Low	Not required	None	None	Partial
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.
19	CVE-2017-5848	125	DoS	2017-02-09	2020-11-20	5.0	None	Remote	Low	Not required	None	None	Partial
The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a denial of service (invalid memory read and crash) via vectors involving PSM parsing.
20	CVE-2017-3167	287	Bypass	2017-06-20	2021-06-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.
21	CVE-2016-9901	20	Exec Code	2018-06-11	2018-08-01	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" (unprivileged) page, giving it access to Pocket's messaging API through HTML injection. This vulnerability affects Firefox ESR < 45.6 and Firefox < 50.1.
22	CVE-2016-9811	125	DoS	2017-01-13	2021-11-29	4.3	None	Remote	Medium	Not required	None	None	Partial
The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.
23	CVE-2016-9560	787	Overflow	2017-02-15	2021-03-15	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image.
24	CVE-2016-9446	665	+Info	2017-01-23	2021-11-30	5.0	None	Remote	Low	Not required	Partial	None	None
The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.
25	CVE-2016-9131	20	DoS	2017-01-12	2020-08-19	5.0	None	Remote	Low	Not required	None	None	Partial
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.
26	CVE-2016-8864	617	DoS	2016-11-02	2020-08-17	5.0	None	Remote	Low	Not required	None	None	Partial
named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.
27	CVE-2016-7163	190	Exec Code Overflow	2016-09-21	2022-04-07	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
28	CVE-2016-6797	863		2017-08-10	2022-04-18	5.0	None	Remote	Low	Not required	Partial	None	None
The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not.
29	CVE-2016-6796		Bypass	2017-08-11	2022-04-18	5.0	None	Remote	Low	Not required	None	Partial	None
A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.
30	CVE-2016-6794		Bypass	2017-08-10	2022-04-18	5.0	None	Remote	Low	Not required	Partial	None	None
When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible.
31	CVE-2016-5126	787	DoS Exec Code Overflow	2016-06-01	2021-08-04	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
32	CVE-2016-5018		Bypass	2017-08-10	2022-04-18	6.4	None	Remote	Low	Not required	Partial	Partial	None
In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications.
33	CVE-2016-5011		DoS	2017-04-11	2020-09-11	4.9	None	Local	Low	Not required	None	None	Complete
The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
34	CVE-2016-4020		+Info	2016-05-25	2021-08-04	2.1	None	Local	Low	Not required	Partial	None	None
The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).
35	CVE-2016-2857	119	DoS Overflow	2016-04-12	2021-08-04	3.6	None	Local	Low	Not required	Partial	None	Partial
The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.
36	CVE-2016-2775	20	DoS	2016-07-19	2020-08-25	4.3	None	Remote	Medium	Not required	None	None	Partial
ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.
37	CVE-2016-0762	203		2017-08-10	2022-04-18	4.3	None	Remote	Medium	Not required	Partial	None	None
The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note that the default configuration includes the LockOutRealm which makes exploitation of this vulnerability harder.
38	CVE-2015-8896		DoS	2017-03-15	2021-04-28	4.3	None	Remote	Medium	Not required	None	None	Partial
Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.
39	CVE-2015-8631	772	DoS	2016-02-13	2021-02-02	4.0	None	Remote	Low	???	None	None	Partial
Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service (memory consumption) via a request specifying a NULL principal name.
40	CVE-2015-8629	125	DoS +Info	2016-02-13	2021-02-02	2.1	None	Remote	High	???	Partial	None	None
The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authenticated users to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted string.
41	CVE-2015-8126	120	DoS Overflow	2015-11-13	2022-05-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.
42	CVE-2015-5160	200	+Info	2018-08-20	2020-10-15	2.1	None	Local	Low	Not required	Partial	None	None
libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.
43	CVE-2015-2808	327		2015-04-01	2020-11-23	5.0	None	Remote	Low	Not required	Partial	None	None
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
44	CVE-2015-1779	400	DoS	2016-01-12	2020-09-09	7.8	None	Remote	Low	Not required	None	None	Complete
The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
45	CVE-2015-0797		DoS Exec Code	2015-05-14	2020-09-28	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.
46	CVE-2014-7840	20	Exec Code	2014-12-12	2020-08-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data.
47	CVE-2014-7815	20	DoS	2014-11-14	2020-08-11	5.0	None	Remote	Low	Not required	None	None	Partial
The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.
48	CVE-2014-5353	476	DoS	2014-12-16	2021-02-02	3.5	None	Remote	Medium	???	None	None	Partial
The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with no results, as demonstrated by using an incorrect object type for a password policy.
49	CVE-2014-4341	125	DoS	2014-07-20	2021-02-02	5.0	None	Remote	Low	Not required	None	None	Partial
MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI application session.
50	CVE-2014-3615	200	+Info	2014-11-01	2020-08-11	2.1	None	Local	Low	Not required	Partial	None	None
The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution.

Total number of vulnerabilities : 54 Page : 1 (This Page)2