Enterprise Linux Aus (Redhat) - vulnerabilities (CVEs)

50 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2026-04-22. Vendor: Redhat.

CVEs of Enterprise Linux Aus

CVE-2026-31431 - CVSS 7.8 (high), 2026-04-22: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit…
CVE-2026-39979 - CVSS 8.2 (high), 2026-04-13: jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jv_parse_sized() API in libjq accepts a counted buffer…
CVE-2025-62230 - CVSS 7.3 (high), 2025-10-30: A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures…
CVE-2025-62231 - CVSS 7.3 (high), 2025-10-30: A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an…
CVE-2025-31277 - CVSS 8.8 (high), 2025-07-30: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS…
CVE-2024-3183 - CVSS 8.1 (high), 2024-06-12: A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key. This key is different for each new session,…
CVE-2024-0229 - CVSS 7.8 (high), 2024-02-09: An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a…
CVE-2023-47038 - CVSS 7.8 (high), 2023-12-18: A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker…
CVE-2023-3972 - CVSS 7.8 (high), 2023-11-01: A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and…
CVE-2023-0494 - CVSS 7.8 (high), 2023-03-27: A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and…
CVE-2021-3669 - CVSS 5.5 (medium), 2022-08-26: A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource…
CVE-2021-20316 - CVSS 6.8 (medium), 2022-08-23: A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share…
CVE-2021-3609 - CVSS 7 (high), 2022-03-03: .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory,…
CVE-2021-3570 - CVSS 8.8 (high), 2021-07-09: A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to…
CVE-2020-14355 - CVSS 6.6 (medium), 2020-10-07: Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the…
CVE-2020-1045 - CVSS 7.5 (high), 2020-09-11: <p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes…
CVE-2020-10711 - CVSS 5.9 (medium), 2020-05-22: A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP…
CVE-2019-9506 - CVSS 8.1 (high), 2019-08-14: The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from…
CVE-2019-11478 - CVSS 7.5 (high), 2019-06-19: Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP…
CVE-2019-11477 - CVSS 7.5 (high), 2019-06-19: Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective…
CVE-2019-10126 - CVSS 9.8 (critical), 2019-06-14: A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might…
CVE-2019-11811 - CVSS 7 (high), 2019-05-07: An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmi_si module is…
CVE-2018-16878 - CVSS 6.2 (medium), 2019-04-18: A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS
CVE-2018-14638 - CVSS 7.5 (high), 2018-09-14: A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are…
CVE-2018-13405 - CVSS 7.8 (high), 2018-07-06: The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a…
CVE-2017-7847 - CVSS 4.3 (medium), 2018-06-11: Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird < 52.5.2.
CVE-2017-7829 - CVSS 5.3 (medium), 2018-06-11: It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed…
CVE-2017-7824 - CVSS 9.8 (critical), 2018-06-11: A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being…
CVE-2016-9901 - CVSS 9.8 (critical), 2018-06-11: HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved"…
CVE-2018-1049 - CVSS 5.9 (medium), 2018-02-16: In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd…
CVE-2017-10661 - CVSS 7 (high), 2017-08-19: Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or…
CVE-2016-5195 - CVSS 7 (high), 2016-11-10: Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a…
CVE-2015-5477 - CVSS 7.5 (high), 2015-07-29: named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon…
CVE-2014-9585 - CVSS 2.1 (low), 2015-01-09: The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it…
CVE-2014-9584 - CVSS 2.1 (low), 2015-01-09: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference…
CVE-2011-1182 - CVSS 3.6 (low), 2013-03-01: kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call.
CVE-2013-0775 - CVSS 9.3 (critical), 2013-02-19: Use-after-free vulnerability in the nsImageLoadingContent::OnStopContainer function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3,…
CVE-2013-0782 - CVSS 9.3 (critical), 2013-02-19: Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird…
CVE-2013-0772 - CVSS 5.8 (medium), 2013-02-19: The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain…
CVE-2013-0780 - CVSS 9.3 (critical), 2013-02-19: Use-after-free vulnerability in the nsOverflowContinuationTracker::Finish function in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird…
CVE-2013-0776 - CVSS 4 (medium), 2013-02-19: Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3, Thunderbird ESR 17.x before 17.0.3, and SeaMonkey before 2.16 allow…
CVE-2013-0783 - CVSS 9.3 (critical), 2013-02-19: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbird before 17.0.3,…
CVE-2012-0260 - CVSS 6.5 (medium), 2012-06-05: The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a…
CVE-2011-2213 - CVSS 4.9 (medium), 2011-08-29: The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local…
CVE-2011-2492 - CVSS 1.9 (low), 2011-07-28: The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which allows local users to obtain…
CVE-2011-1093 - CVSS 7.8 (high), 2011-07-18: The dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control Protocol (DCCP) implementation in the Linux kernel before 2.6.38…
CVE-2011-1746 - CVSS 6.9 (medium), 2011-05-09: Multiple integer overflows in the (1) agp_allocate_memory and (2) agp_create_user_memory functions in drivers/char/agp/generic.c in the Linux kernel before…
CVE-2011-1745 - CVSS 6.9 (medium), 2011-05-09: Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain…
CVE-2011-2022 - CVSS 6.9 (medium), 2011-05-09: The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter, which…
CVE-2011-1593 - CVSS 4.9 (medium), 2011-05-03: Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service…