8.0 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2022-30600	682	Bypass	2022-05-18	2022-05-26	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed.
2	CVE-2022-30599	89	Sql	2022-05-18	2022-05-26	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria.
3	CVE-2022-30598			2022-05-18	2022-05-26	4.0	None	Remote	Low	???	Partial	None	None
A flaw was found in moodle where global search results could include author information on some activities where a user may not otherwise have access to it.
4	CVE-2022-30597			2022-05-18	2022-05-26	5.0	None	Remote	Low	Not required	Partial	None	None
A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field.
5	CVE-2022-30596	79	XSS	2022-05-18	2022-05-26	3.5	None	Remote	Medium	???	None	Partial	None
A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sanitizing to prevent a stored XSS risk.
6	CVE-2022-0918		DoS	2022-03-16	2022-03-28	5.0	None	Remote	Low	Not required	None	None	Partial
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
7	CVE-2022-0530		Exec Code	2022-02-09	2022-05-17	4.3	None	Remote	Medium	Not required	None	None	Partial
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.
8	CVE-2022-0529	787	Exec Code	2022-02-09	2022-05-06	4.3	None	Remote	Medium	Not required	None	None	Partial
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.
9	CVE-2022-0487	416		2022-02-04	2022-04-30	2.1	None	Local	Low	Not required	Partial	None	None
A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1.
10	CVE-2021-43389	125		2021-11-04	2022-04-05	2.1	None	Local	Low	Not required	None	None	Partial
An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c.
11	CVE-2021-39251	476		2021-09-07	2021-11-29	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22.
12	CVE-2021-33285	787	DoS Overflow	2021-09-07	2022-05-03	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
In NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfs_get_attribute_value, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by mounting a crafted ntfs partition. The root cause is a missing consistency check after reading an MFT record : the "bytes_in_use" field should be less than the "bytes_allocated" field. When it is not, the parsing of the records proceeds into the wild.
13	CVE-2021-20221	787		2021-05-13	2021-12-10	2.1	None	Local	Low	Not required	None	None	Partial
An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating controller state fields and their subsequent processing. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.
14	CVE-2021-4207	362	Exec Code Overflow	2022-04-29	2022-05-10	4.6	None	Local	Low	Not required	Partial	Partial	Partial
A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use this flaw to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process.
15	CVE-2021-4206	190	Exec Code Overflow	2022-04-29	2022-05-10	4.6	None	Local	Low	Not required	Partial	Partial	Partial
A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. This flaw allows a malicious privileged guest user to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process.
16	CVE-2021-4154	416	DoS	2022-02-04	2022-03-01	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.
17	CVE-2021-4145	476		2022-01-25	2022-03-15	4.9	None	Local	Low	Not required	None	None	Complete
A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The `self` pointer is dereferenced in mirror_wait_on_conflicts() without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on the host when writing data reaches the threshold of mirroring node.
18	CVE-2021-3750	416	DoS Exec Code	2022-05-02	2022-05-16	4.6	None	Local	Low	Not required	Partial	Partial	Partial
A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be written to the controller's registers and trigger undesirable actions (such as reset) while the device is still transferring packets. This can ultimately lead to a use-after-free issue. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code within the context of the QEMU process on the host. This flaw affects QEMU versions before 7.0.0.
19	CVE-2021-3746	119	Overflow	2021-10-19	2021-10-22	7.1	None	Remote	Medium	Not required	None	None	Complete
A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerability is to system availability. This issue affects libtpms versions before 0.8.5, before 0.7.9 and before 0.6.6.
20	CVE-2021-3716	924		2022-03-02	2022-03-09	3.5	None	Remote	Medium	???	None	None	Partial
A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.
21	CVE-2021-3682	763	Exec Code	2021-08-05	2021-10-18	6.0	None	Remote	Medium	???	Partial	Partial	Partial
A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPICE client due to the packet queue being full. A malicious SPICE client could use this flaw to make QEMU call free() with faked heap chunk metadata, resulting in a crash of QEMU or potential code execution with the privileges of the QEMU process on the host.
22	CVE-2021-3679	400	DoS	2021-08-05	2022-01-01	2.1	None	Local	Low	Not required	None	None	Partial
A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.
23	CVE-2021-3634	119	Overflow	2021-08-31	2022-05-26	4.0	None	Remote	Low	???	None	None	Partial
A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous session_id is kept and used as an input to new secret_hash. Historically, both of these buffers had shared length variable, which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange method, which can be based on hash of different size, eventually creating "secret_hash" of different size than the session_id has. This becomes an issue when the session_id memory is zeroed or when it is used again during second key re-exchange.
24	CVE-2021-3622	400	Overflow	2021-12-23	2022-01-10	4.3	None	Remote	Medium	Not required	None	None	Partial
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.
25	CVE-2021-3571	119	Overflow +Info	2021-07-09	2021-09-14	5.5	None	Remote	Low	???	Partial	None	Partial
A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1.
26	CVE-2021-3527	770	DoS	2021-05-26	2021-11-15	2.1	None	Local	Low	Not required	None	None	Partial
A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array (VLA) on the stack without proper validation. Since the total size is not bounded, a malicious guest could use this flaw to influence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denial of service.
27	CVE-2021-3507	119	Overflow +Info	2021-05-06	2021-06-01	3.6	None	Local	Low	Not required	Partial	None	Partial
A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.
28	CVE-2021-3416	835	Overflow Bypass	2021-03-18	2022-01-04	2.1	None	Local	Low	Not required	None	None	Partial
A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario.
29	CVE-2020-25743	476		2020-10-06	2020-10-07	2.1	None	Local	Low	Not required	None	None	Partial
hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call.
30	CVE-2020-25637	415	DoS	2020-10-06	2020-12-04	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically, clients connecting to the read-write socket with limited ACL permissions could use this flaw to crash the libvirt daemon, resulting in a denial of service, or potentially escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
31	CVE-2020-14364	125	DoS Exec Code	2020-08-31	2020-11-11	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.
32	CVE-2019-7665	125	DoS	2019-02-09	2021-11-30	4.3	None	Remote	Medium	Not required	None	None	Partial
In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service (program crash) because ebl_core_note does not reject malformed core file notes.
33	CVE-2019-7548	89	Sql	2019-02-06	2021-11-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
34	CVE-2019-7164	89	Sql	2019-02-20	2021-12-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
35	CVE-2019-7150	125		2019-01-29	2021-11-30	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom in libelf/elf32_xlatetom.c, due to dwfl_segment_report_module not checking whether the dyn data read from a core file is truncated. A crafted input can cause a program crash, leading to denial-of-service, as demonstrated by eu-stack.

Total number of vulnerabilities : 35 Page : 1 (This Page)