6.6 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2019-14835	120	Overflow	2019-09-17	2021-06-02	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
2	CVE-2019-14287	755	Bypass	2019-10-17	2022-04-18	9.0	None	Remote	Low	???	Complete	Complete	Complete
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
3	CVE-2019-11745	787		2020-01-08	2021-02-19	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.
4	CVE-2019-6133	362	Bypass	2019-01-11	2020-08-24	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.
5	CVE-2019-3896	415	DoS	2019-06-19	2019-07-01	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).
6	CVE-2019-0223			2019-04-23	2022-04-22	5.8	None	Remote	Medium	Not required	Partial	Partial	None
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS even when configured to verify the peer certificate while used with OpenSSL versions before 1.1.0. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic.
7	CVE-2018-1000805	863		2018-10-08	2022-04-06	6.5	None	Remote	Low	???	Partial	Partial	Partial
Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.
8	CVE-2018-1000156	20	Exec Code	2018-04-06	2019-07-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.
9	CVE-2018-1000140	787	Exec Code Overflow	2018-03-23	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate.
10	CVE-2018-14634	190	Overflow	2018-09-25	2021-07-20	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
11	CVE-2018-13405	269		2018-07-06	2022-04-06	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID.
12	CVE-2018-10901			2018-07-26	2020-07-15	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.
13	CVE-2018-10675	416	DoS	2018-05-02	2020-07-15	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.
14	CVE-2018-7750	287		2018-03-13	2022-04-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.
15	CVE-2018-5391	20	DoS	2018-09-06	2019-03-21	7.8	None	Remote	Low	Not required	None	None	Complete
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
16	CVE-2018-5390	400	DoS	2018-08-06	2020-09-18	7.8	None	Remote	Low	Not required	None	None	Complete
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
17	CVE-2018-3639	203	Bypass	2018-05-22	2021-08-13	2.1	None	Local	Low	Not required	Partial	None	None
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
18	CVE-2018-1126	190	Overflow	2018-05-23	2019-07-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124.
19	CVE-2017-1000366	119	Exec Code Overflow	2017-06-19	2020-10-15	7.2	None	Local	Low	Not required	Complete	Complete	Complete
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
20	CVE-2017-1000251	787	Exec Code Overflow	2017-09-12	2020-06-03	7.7	None	Local Network	Low	???	Complete	Complete	Complete
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
21	CVE-2017-12613	125	DoS	2017-10-24	2022-04-18	3.6	None	Local	Low	Not required	Partial	None	Partial
When apr_time_exp() or apr_os_exp_time() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.
22	CVE-2017-3145	416		2019-01-16	2019-10-09	5.0	None	Remote	Low	Not required	None	None	Partial
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1.
23	CVE-2017-3139	617	DoS	2019-04-09	2021-05-14	5.0	None	Remote	Low	Not required	None	None	Partial
A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response.
24	CVE-2017-3137	617		2019-01-16	2019-10-09	5.0	None	Remote	Low	Not required	None	None	Partial
Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND 9.9.9-P6, 9.9.10b1->9.9.10rc1, 9.10.4-P6, 9.10.5b1->9.10.5rc1, 9.11.0-P3, 9.11.1b1->9.11.1rc1, and 9.9.9-S8.
25	CVE-2016-8864	617	DoS	2016-11-02	2020-08-17	5.0	None	Remote	Low	Not required	None	None	Partial
named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.
26	CVE-2015-7704	20	DoS	2017-08-07	2021-11-17	5.0	None	Remote	Low	Not required	None	None	Partial
The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of crafted "KOD" messages.
27	CVE-2015-4643	119	Exec Code Overflow	2016-05-16	2019-12-27	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4022.
28	CVE-2015-3209	787	Exec Code Overflow	2015-06-15	2022-02-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.
29	CVE-2015-3149	59		2017-07-25	2017-07-31	2.1	None	Local	Low	Not required	None	Partial	None
The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack.
30	CVE-2015-2808	327		2015-04-01	2020-11-23	5.0	None	Remote	Low	Not required	Partial	None	None
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
31	CVE-2015-1212		DoS	2015-02-06	2021-09-08	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
32	CVE-2015-1211		+Priv	2015-02-06	2021-09-08	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android does not properly restrict the URI scheme during a ServiceWorker registration, which allows remote attackers to gain privileges via a filesystem: URI.
33	CVE-2015-1210		Bypass	2015-02-06	2021-09-08	5.0	None	Remote	Low	Not required	None	Partial	None
The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, does not properly consider frame access restrictions during the throwing of an exception, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
34	CVE-2015-1209	416	DoS	2015-02-06	2021-09-08	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper handling of a shadow-root anchor.
35	CVE-2015-0797		DoS Exec Code	2015-05-14	2020-09-28	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.
36	CVE-2015-0192		+Priv	2015-07-02	2019-06-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine.
37	CVE-2014-9529	362	DoS Mem. Corr.	2015-01-09	2020-05-21	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key.
38	CVE-2014-8567	399	DoS	2014-11-14	2019-07-09	9.4	None	Remote	Low	Not required	None	Complete	Complete
The mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service (Apache HTTP server crash) via a crafted logout request that triggers a read of uninitialized data.
39	CVE-2014-8160	20	Bypass	2015-03-02	2020-05-21	5.0	None	Remote	Low	Not required	None	Partial	None
net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.
40	CVE-2014-8140	787	Exec Code Overflow	2020-01-31	2020-02-05	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
41	CVE-2014-8139	787	Exec Code Overflow	2020-01-31	2020-02-05	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
42	CVE-2014-7844	74	Exec Code	2020-01-14	2020-01-21	7.2	None	Local	Low	Not required	Complete	Complete	Complete
BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.
43	CVE-2014-5353	476	DoS	2014-12-16	2021-02-02	3.5	None	Remote	Medium	???	None	None	Partial
The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with no results, as demonstrated by using an incorrect object type for a password policy.
44	CVE-2014-4656	190	DoS Overflow	2014-07-03	2020-08-14	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of service by leveraging /dev/snd/controlCX access, related to (1) index values in the snd_ctl_add function and (2) numid values in the snd_ctl_remove_numid_conflict function.

Total number of vulnerabilities : 44 Page : 1 (This Page)