Enterprise Linux For Ibm Z Systems (Redhat) - vulnerabilities (CVEs)

117 CVEs, 0 in the last 30 days, 30 known versions, newest CVE from 2026-07-21. Vendor: Redhat.

CVEs of Enterprise Linux For Ibm Z Systems

CVE-2026-59849 - CVSS 7.5 (high), 2026-07-21: A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when…
CVE-2026-59842 - CVSS 5.3 (medium), 2026-07-21: A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without…
CVE-2026-15370 - CVSS 7.3 (high), 2026-07-21: A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer.…
CVE-2026-42009 - CVSS 7.5 (high), 2026-05-18: A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator…
CVE-2026-1709 - CVSS 9.8 (critical), 2026-02-06: A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This…
CVE-2025-13601 - CVSS 7.7 (high), 2025-11-26: A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to…
CVE-2025-6021 - CVSS 7.5 (high), 2025-06-12: A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This…
CVE-2025-3155 - CVSS 7.4 (high), 2025-04-03: A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to…
CVE-2025-2784 - CVSS 7 (high), 2025-04-03: A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup…
CVE-2025-1756 - CVSS 7.8 (high), 2025-02-27: mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated…
CVE-2025-1755 - CVSS 7.8 (high), 2025-02-27: MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with…
CVE-2024-12088 - CVSS 7.5 (high), 2025-01-14: A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server…
CVE-2024-12087 - CVSS 7.5 (high), 2025-01-14: A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client…
CVE-2024-12085 - CVSS 7.5 (high), 2025-01-14: A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length…
CVE-2024-9676 - CVSS 6.5 (medium), 2024-10-15: A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and…
CVE-2024-9675 - CVSS 7.8 (high), 2024-10-09: A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a…
CVE-2024-6387 - CVSS 8.1 (high), 2024-07-01: A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an…
CVE-2024-3049 - CVSS 5.9 (medium), 2024-06-06: A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be…
CVE-2023-3758 - CVSS 7.1 (high), 2024-04-18: A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization…
CVE-2022-24809 - CVSS 6.5 (medium), 2024-04-16: net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a…
CVE-2022-24807 - CVSS 6.5 (medium), 2024-04-16: net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to…
CVE-2022-24806 - CVSS 6.5 (medium), 2024-04-16: net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an…
CVE-2022-24808 - CVSS 6.5 (medium), 2024-04-16: net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a…
CVE-2022-24805 - CVSS 8.8 (high), 2024-04-16: net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the `INDEX`…
CVE-2023-7250 - CVSS 5.3 (medium), 2024-03-18: A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the…
CVE-2024-1488 - CVSS 8 (high), 2024-02-15: A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime…
CVE-2023-6681 - CVSS 5.3 (medium), 2024-02-12: A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary…
CVE-2024-1062 - CVSS 5.5 (medium), 2024-02-12: A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.
CVE-2023-5992 - CVSS 5.9 (medium), 2024-01-31: A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in the…
CVE-2024-1086 - CVSS 7.8 (high), 2024-01-31: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The…
CVE-2024-0409 - CVSS 7.8 (high), 2024-01-18: A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type…
CVE-2024-0408 - CVSS 5.5 (medium), 2024-01-18: A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues…
CVE-2023-6915 - CVSS 6.2 (medium), 2024-01-15: A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a…
CVE-2023-5455 - CVSS 6.5 (medium), 2024-01-10: A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the…
CVE-2024-0193 - CVSS 7.8 (high), 2024-01-02: A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed,…
CVE-2023-4641 - CVSS 5.5 (medium), 2023-12-27: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt,…
CVE-2023-5869 - CVSS 8.8 (high), 2023-12-10: A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value…
CVE-2023-5868 - CVSS 4.3 (medium), 2023-12-10: A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function…
CVE-2023-5870 - CVSS 4.4 (medium), 2023-12-10: A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum…
CVE-2023-42669 - CVSS 6.5 (medium), 2023-11-06: A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This vulnerability…
CVE-2023-46847 - CVSS 8.6 (high), 2023-11-03: Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory…
CVE-2023-46846 - CVSS 9.3 (critical), 2023-11-03: SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past…
CVE-2023-3972 - CVSS 7.8 (high), 2023-11-01: A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and…
CVE-2023-5367 - CVSS 7.8 (high), 2023-10-25: A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in…
CVE-2023-5633 - CVSS 7.8 (high), 2023-10-23: The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled…
CVE-2023-4911 - CVSS 7.8 (high), 2023-10-03: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow…
CVE-2023-4732 - CVSS 4.7 (medium), 2023-10-03: A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause…
CVE-2023-5157 - CVSS 7.5 (high), 2023-09-27: A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.
CVE-2023-4527 - CVSS 6.5 (medium), 2023-09-18: A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via…
CVE-2023-4806 - CVSS 5.9 (medium), 2023-09-18: A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an…
CVE-2023-38201 - CVSS 6.5 (medium), 2023-08-25: A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an…
CVE-2023-4042 - CVSS 5.5 (medium), 2023-08-23: A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue…
CVE-2023-3899 - CVSS 7.8 (high), 2023-08-23: A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1…
CVE-2023-38200 - CVSS 7.5 (high), 2023-07-24: A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This…
CVE-2023-0179 - CVSS 7.8 (high), 2023-03-27: A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses,…
CVE-2023-0494 - CVSS 7.8 (high), 2023-03-27: A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and…
CVE-2019-8720 - CVSS 8.8 (high), 2023-03-06: A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved…
CVE-2022-4254 - CVSS 8.8 (high), 2023-02-01: sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVE-2021-3669 - CVSS 5.5 (medium), 2022-08-26: A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource…
CVE-2021-3975 - CVSS 6.5 (medium), 2022-08-23: A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being…
CVE-2021-31566 - CVSS 7.8 (high), 2022-08-23: An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of…
CVE-2021-23177 - CVSS 7.8 (high), 2022-08-23: An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacker may…
CVE-2021-3659 - CVSS 5.5 (medium), 2022-08-22: A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection.…
CVE-2022-1227 - CVSS 8.8 (high), 2022-04-29: A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded…
CVE-2022-27649 - CVSS 7.5 (high), 2022-04-04: A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine),…
CVE-2022-0435 - CVSS 8.8 (high), 2022-03-25: A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of…
CVE-2022-0330 - CVSS 7.8 (high), 2022-03-25: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This…
CVE-2022-1011 - CVSS 7.8 (high), 2022-03-18: A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized…
CVE-2021-20257 - CVSS 6.5 (medium), 2022-03-16: An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if…
CVE-2022-0847 - CVSS 7.8 (high), 2022-03-10: A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe…
CVE-2022-0516 - CVSS 7.8 (high), 2022-03-10: A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local…
CVE-2021-3733 - CVSS 6.5 (medium), 2022-03-10: There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects…
CVE-2021-3737 - CVSS 7.5 (high), 2022-03-04: A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server,…
CVE-2021-3656 - CVSS 8.8 (high), 2022-03-04: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block)…
CVE-2021-23214 - CVSS 8.1 (high), 2022-03-04: When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject…
CVE-2022-0492 - CVSS 7.8 (high), 2022-03-03: A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances,…
CVE-2021-3602 - CVSS 5.5 (medium), 2022-03-03: An information disclosure flaw was found in Buildah, when building containers using chroot isolation. Running processes in container builds (e.g. Dockerfile…
CVE-2021-3677 - CVSS 6.5 (medium), 2022-03-02: A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database…
CVE-2021-44142 - CVSS 8.8 (high), 2022-02-21: The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a…
CVE-2021-4091 - CVSS 7.5 (high), 2022-02-18: A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests,…
CVE-2021-3930 - CVSS 6.5 (medium), 2022-02-18: An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page'…
CVE-2020-25719 - CVSS 7.2 (high), 2022-02-18: A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become…
CVE-2020-25717 - CVSS 8.1 (high), 2022-02-18: A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.
CVE-2016-2124 - CVSS 5.9 (medium), 2022-02-18: A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even…
CVE-2021-3551 - CVSS 7.8 (high), 2022-02-16: A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw…
CVE-2021-4034 - CVSS 7.8 (high), 2022-01-28: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users…
CVE-2021-3672 - CVSS 5.6 (medium), 2021-11-23: A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong…
CVE-2021-40438 - CVSS 9 (critical), 2021-09-16: A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server…
CVE-2020-14301 - CVSS 6.5 (medium), 2021-05-27: An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML…
CVE-2020-27842 - CVSS 5.5 (medium), 2021-01-05: There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a…
CVE-2020-9490 - CVSS 7.5 (high), 2020-08-07: Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the…
CVE-2020-8945 - CVSS 7.5 (high), 2020-02-12: The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This…
CVE-2019-19906 - CVSS 7.5 (high), 2019-12-19: cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The…
CVE-2019-5544 - CVSS 9.8 (critical), 2019-12-06: OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical…
CVE-2019-6470 - CVSS 7.5 (high), 2019-11-01: There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd…
CVE-2019-11043 - CVSS 9.8 (critical), 2019-10-28: In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to…
CVE-2019-13272 - CVSS 7.8 (high), 2019-07-17: In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace…
CVE-2019-0211 - CVSS 7.8 (high), 2019-04-08: In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads…
CVE-2019-7317 - CVSS 5.3 (medium), 2019-02-04: png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVE-2018-16881 - CVSS 7.5 (high), 2019-01-25: A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which…