Enterprise Linux Hpc Node (Redhat) - vulnerabilities (CVEs)

146 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2017-07-25. Vendor: Redhat.

CVEs of Enterprise Linux Hpc Node

CVE-2015-3149 - CVSS 5.5 (medium), 2017-07-25: The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack.
CVE-2015-5195 - CVSS 7.5 (high), 2017-07-21: ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault) via a crafted statistics or filegen…
CVE-2015-5194 - CVSS 7.5 (high), 2017-07-21: The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted…
CVE-2015-5300 - CVSS 7.5 (high), 2017-07-21: The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default,…
CVE-2015-5219 - CVSS 7.5 (high), 2017-07-21: The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote…
CVE-2016-3099 - CVSS 7.5 (high), 2017-06-08: mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation…
CVE-2016-5416 - CVSS 7.5 (high), 2017-06-08: 389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through…
CVE-2016-5405 - CVSS 9.8 (critical), 2017-06-08: 389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through…
CVE-2016-4992 - CVSS 7.5 (high), 2017-06-08: 389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through…
CVE-2016-7050 - CVSS 9.8 (critical), 2017-06-08: SerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat…
CVE-2016-5410 - CVSS 5.5 (medium), 2017-04-19: firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2)…
CVE-2016-4455 - CVSS 3.3 (low), 2017-04-14: The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache…
CVE-2016-6489 - CVSS 7.5 (high), 2017-04-14: The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.
CVE-2016-4444 - CVSS 7 (high), 2017-04-11: The allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a…
CVE-2016-4989 - CVSS 7 (high), 2017-04-11: setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with…
CVE-2016-4446 - CVSS 7 (high), 2017-04-11: The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted…
CVE-2016-4445 - CVSS 7 (high), 2017-04-11: The fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial…
CVE-2016-9636 - CVSS 9.8 (critical), 2017-01-27: Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers…
CVE-2016-9634 - CVSS 9.8 (critical), 2017-01-27: Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers…
CVE-2016-9635 - CVSS 9.8 (critical), 2017-01-27: Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers…
CVE-2016-7545 - CVSS 8.8 (high), 2017-01-19: SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
CVE-2016-7091 - CVSS 4.4 (medium), 2016-12-22: sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of…
CVE-2014-8241 - CVSS 9.8 (critical), 2016-12-14: XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a malloc return value, a…
CVE-2016-7796 - CVSS 5.5 (medium), 2016-10-13: The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a…
CVE-2016-7166 - CVSS 5.5 (medium), 2016-09-21: libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption…
CVE-2016-5844 - CVSS 6.5 (medium), 2016-09-21: Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.
CVE-2016-5418 - CVSS 7.5 (high), 2016-09-21: The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to…
CVE-2016-4809 - CVSS 7.5 (high), 2016-09-21: The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial…
CVE-2016-4302 - CVSS 7.8 (high), 2016-09-21: Heap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute…
CVE-2016-4300 - CVSS 7.8 (high), 2016-09-21: Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute…
CVE-2016-5388 - CVSS 8.1 (high), 2016-07-19: Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect…
CVE-2016-4470 - CVSS 5.5 (medium), 2016-06-27: The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which…
CVE-2016-0758 - CVSS 7.8 (high), 2016-06-27: Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data.
CVE-2016-3698 - CVSS 8.1 (high), 2016-06-13: libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote…
CVE-2015-5261 - CVSS 7.1 (high), 2016-06-07: Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands…
CVE-2015-5260 - CVSS 7.8 (high), 2016-06-07: Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or…
CVE-2015-4605 - CVSS 7.5 (high), 2016-05-16: The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not…
CVE-2015-4604 - CVSS 7.5 (high), 2016-05-16: The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not…
CVE-2015-4603 - CVSS 9.8 (critical), 2016-05-16: The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers…
CVE-2015-4602 - CVSS 9.8 (critical), 2016-05-16: The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote…
CVE-2015-4601 - CVSS 9.8 (critical), 2016-05-16: PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type,…
CVE-2015-4600 - CVSS 9.8 (critical), 2016-05-16: The SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service…
CVE-2015-4599 - CVSS 9.8 (critical), 2016-05-16: The SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain…
CVE-2015-4598 - CVSS 6.5 (medium), 2016-05-16: PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read…
CVE-2015-3412 - CVSS 5.3 (medium), 2016-05-16: PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read…
CVE-2015-3411 - CVSS 6.5 (medium), 2016-05-16: PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read…
CVE-2016-3718 - CVSS 5.5 (medium), 2016-05-05: The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF)…
CVE-2016-3717 - CVSS 5.5 (medium), 2016-05-05: The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
CVE-2016-3716 - CVSS 3.3 (low), 2016-05-05: The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.
CVE-2016-3715 - CVSS 5.5 (medium), 2016-05-05: The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
CVE-2016-2109 - CVSS 7.5 (high), 2016-05-05: The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote…
CVE-2016-2108 - CVSS 9.8 (critical), 2016-05-05: The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2016-2107 - CVSS 5.9 (medium), 2016-05-05: The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows…
CVE-2016-2106 - CVSS 7.5 (high), 2016-05-05: Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a…
CVE-2016-2105 - CVSS 7.5 (high), 2016-05-05: Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a…
CVE-2016-0695 - CVSS 5.9 (medium), 2016-04-21: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect…
CVE-2016-0741 - CVSS 7.5 (high), 2016-04-19: slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service…
CVE-2010-5325 - CVSS 9.8 (critical), 2016-04-15: Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service…
CVE-2015-8540 - CVSS 8.8 (high), 2016-04-14: Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and…
CVE-2016-3069 - CVSS 8.8 (high), 2016-04-13: Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.
CVE-2016-3068 - CVSS 8.8 (high), 2016-04-13: Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
CVE-2015-5229 - CVSS 7.5 (high), 2016-04-08: The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow…
CVE-2016-0636 - CVSS 8.1 (high), 2016-03-24: Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown…
CVE-2015-7547 - CVSS 8.1 (high), 2016-02-18: Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before…
CVE-2016-0616 - CVSS 4 (medium), 2016-01-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote…
CVE-2016-0609 - CVSS 1.7 (low), 2016-01-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x…
CVE-2016-0608 - CVSS 3.5 (low), 2016-01-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x…
CVE-2016-0606 - CVSS 3.5 (low), 2016-01-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x…
CVE-2016-0600 - CVSS 3.5 (low), 2016-01-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x…
CVE-2016-0598 - CVSS 3.5 (low), 2016-01-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x…
CVE-2016-0597 - CVSS 4 (medium), 2016-01-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x…
CVE-2016-0596 - CVSS 4 (medium), 2016-01-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before…
CVE-2016-0546 - CVSS 7.2 (high), 2016-01-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x…
CVE-2016-0505 - CVSS 6.8 (medium), 2016-01-21: Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x…
CVE-2015-8327 - CVSS 7.5 (high), 2015-12-17: Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote…
CVE-2015-5277 - CVSS 7.2 (high), 2015-12-17: The get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) before 2.20 might allow local users…
CVE-2015-8317 - CVSS 5 (medium), 2015-12-15: The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated…
CVE-2015-8242 - CVSS 5.8 (medium), 2015-12-15: The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial…
CVE-2015-8241 - CVSS 6.4 (medium), 2015-12-15: The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based…
CVE-2015-7500 - CVSS 5 (medium), 2015-12-15: The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via…
CVE-2015-7499 - CVSS 5 (medium), 2015-12-15: Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory…
CVE-2015-7498 - CVSS 5 (medium), 2015-12-15: Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service…
CVE-2015-7497 - CVSS 5 (medium), 2015-12-15: Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of…
CVE-2015-5312 - CVSS 7.1 (high), 2015-12-15: The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent…
CVE-2015-3276 - CVSS 7.5 (high), 2015-12-07: The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might…
CVE-2015-5287 - CVSS 7.8 (high), 2015-12-07: The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a…
CVE-2015-5273 - CVSS 3.6 (low), 2015-12-07: The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary…
CVE-2015-7981 - CVSS 5 (medium), 2015-11-24: The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain…
CVE-2015-4819 - CVSS 7.2 (high), 2015-10-21: Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and…
CVE-2015-5235 - CVSS 4.3 (medium), 2015-10-09: IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the…
CVE-2015-5234 - CVSS 6.8 (medium), 2015-10-09: IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the…
CVE-2015-3247 - CVSS 6.9 (medium), 2015-09-08: Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (heap-based…
CVE-2015-5157 - CVSS 7.2 (high), 2015-08-31: arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace…
CVE-2015-4142 - CVSS 4.3 (medium), 2015-06-15: Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant 0.7.0 through 2.4, when used for AP mode MLME/SME…
CVE-2015-4148 - CVSS 5 (medium), 2015-06-09: The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a…
CVE-2015-4147 - CVSS 7.5 (high), 2015-06-09: The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __default_headers is…
CVE-2015-4026 - CVSS 7.5 (high), 2015-06-09: The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which…
CVE-2015-4025 - CVSS 7.5 (high), 2015-06-09: PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows…
CVE-2015-4024 - CVSS 5 (medium), 2015-06-09: Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before…
CVE-2015-4022 - CVSS 7.5 (high), 2015-06-09: Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to…