Enterprise Mrg (Redhat) - vulnerabilities (CVEs)

72 CVEs, 0 in the last 30 days, 32 known versions, newest CVE from 2020-12-11. Vendor: Redhat.

CVEs of Enterprise Mrg

• CVE-2020-27825 - CVSS 5.7 (medium), 2020-12-11: A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu…
• CVE-2020-27786 - CVSS 7.8 (high), 2020-12-11: A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi…
• CVE-2020-1749 - CVSS 7.5 (high), 2020-09-09: A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted…
• CVE-2020-10757 - CVSS 7.8 (high), 2020-06-09: A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a…
• CVE-2020-12826 - CVSS 5.3 (medium), 2020-05-12: A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only 32 bits,…
• CVE-2019-14898 - CVSS 7 (high), 2020-05-08: The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause…
• CVE-2012-6685 - CVSS 7.5 (high), 2020-02-19: Nokogiri before 1.5.4 is vulnerable to XXE attacks
• CVE-2012-3460 - CVSS 9.8 (critical), 2019-11-21: cumin: At installation postgresql database user created without password
• CVE-2014-8181 - CVSS 5.5 (medium), 2019-11-06: The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer, which may leaking sensitive information to userspace.
• CVE-2013-6461 - CVSS 6.5 (medium), 2019-11-05: Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits
• CVE-2013-6460 - CVSS 6.5 (medium), 2019-11-05: Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
• CVE-2019-11477 - CVSS 7.5 (high), 2019-06-19: Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective…
• CVE-2019-11478 - CVSS 7.5 (high), 2019-06-19: Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP…
• CVE-2019-3459 - CVSS 6.5 (medium), 2019-04-11: A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.
• CVE-2018-16884 - CVSS 8 (high), 2018-12-18: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use…
• CVE-2017-7482 - CVSS 7.8 (high), 2018-07-30: In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the…
• CVE-2014-8171 - CVSS 5.5 (medium), 2018-02-09: The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a…
• CVE-2017-15127 - CVSS 5.5 (medium), 2018-01-14: A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED…
• CVE-2017-15128 - CVSS 5.5 (medium), 2018-01-14: A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of…
• CVE-2014-3706 - CVSS 5.9 (medium), 2017-10-18: ovirt-engine, as used in Red Hat MRG 3, allows man-in-the-middle attackers to spoof servers by leveraging failure to verify key attributes in vdsm X.509…
• CVE-2015-7837 - CVSS 5.5 (medium), 2017-09-19: The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to…
• CVE-2015-7553 - CVSS 4.7 (medium), 2017-09-14: Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows local…
• CVE-2016-3699 - CVSS 7.4 (high), 2016-10-07: The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to…
• CVE-2016-4470 - CVSS 5.5 (medium), 2016-06-27: The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which…
• CVE-2015-1350 - CVSS 5.5 (medium), 2016-05-02: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege…
• CVE-2015-2922 - CVSS 3.3 (low), 2015-05-27: The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before…
• CVE-2014-3687 - CVSS 7.5 (high), 2014-11-10: The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to…
• CVE-2014-3673 - CVSS 7.5 (high), 2014-11-10: The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk,…
• CVE-2012-2682 - CVSS 5 (medium), 2014-07-19: Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a denial of service…
• CVE-2014-0174 - CVSS 4.3 (medium), 2014-07-11: Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie,…
• CVE-2014-3940 - CVSS 4 (medium), 2014-06-05: The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory…
• CVE-2014-3917 - CVSS 3.3 (low), 2014-06-05: kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially…
• CVE-2013-6445 - CVSS 5 (medium), 2014-04-30: Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for…
• CVE-2011-4930 - CVSS 4.4 (medium), 2014-02-10: Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other…
• CVE-2013-4414 - CVSS 4.3 (medium), 2013-12-23: Cross-site scripting (XSS) vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web…
• CVE-2013-4405 - CVSS 6.8 (medium), 2013-12-23: Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allow remote attackers to hijack…
• CVE-2013-4404 - CVSS 6.5 (medium), 2013-12-23: cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions…
• CVE-2013-4461 - CVSS 7.5 (high), 2013-12-23: SQL injection vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to execute arbitrary SQL commands via…
• CVE-2013-4255 - CVSS 3.5 (low), 2013-10-11: The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4)…
• CVE-2009-5136 - CVSS 4 (medium), 2013-10-11: The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which…
• CVE-2013-4345 - CVSS 5.8 (medium), 2013-10-10: Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to…
• CVE-2013-4284 - CVSS 5 (medium), 2013-10-09: Cumin, as used in Red Hat Enterprise MRG 2.4, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted Ajax update…
• CVE-2013-1892 - CVSS 6 (medium), 2013-10-01: MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote…
• CVE-2013-1909 - CVSS 5.8 (medium), 2013-08-23: The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName…
• CVE-2013-2164 - CVSS 2.1 (low), 2013-07-04: The mmc_ioctl_cdrom_read_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows local users to obtain sensitive information from…
• CVE-2013-3301 - CVSS 7.2 (high), 2013-04-29: The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or…
• CVE-2013-2015 - CVSS 4.7 (medium), 2013-04-29: The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems,…
• CVE-2013-2547 - CVSS 2.1 (low), 2013-03-15: The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 does not…
• CVE-2013-2546 - CVSS 2.1 (low), 2013-03-15: The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strings, which allows…
• CVE-2013-2548 - CVSS 2.1 (low), 2013-03-15: The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an…
• CVE-2012-4462 - CVSS 4.3 (medium), 2013-03-14: aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of service…
• CVE-2013-1774 - CVSS 4 (medium), 2013-02-28: The chase_port function in drivers/usb/serial/io_ti.c in the Linux kernel before 3.7.4 allows local users to cause a denial of service (NULL pointer…
• CVE-2013-1773 - CVSS 6.2 (medium), 2013-02-28: Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service…
• CVE-2012-2735 - CVSS 4.9 (medium), 2012-09-28: Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to…
• CVE-2012-2734 - CVSS 6.8 (medium), 2012-09-28: Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0,…
• CVE-2012-3459 - CVSS 4.9 (medium), 2012-09-28: Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to modify Condor attributes…
• CVE-2012-2683 - CVSS 4.3 (medium), 2012-09-28: Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow…
• CVE-2012-2681 - CVSS 5.8 (medium), 2012-09-28: Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random numbers to generate session keys, which…
• CVE-2012-2685 - CVSS 4 (medium), 2012-09-28: Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to cause a denial of service…
• CVE-2012-2680 - CVSS 5 (medium), 2012-09-28: Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restrict access to resources, which allows…
• CVE-2012-2684 - CVSS 7.5 (high), 2012-09-28: Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging,…
• CVE-2011-2699 - CVSS 7.5 (high), 2012-05-24: The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier…
• CVE-2012-1097 - CVSS 7.8 (high), 2012-05-17: The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local…
• CVE-2012-1090 - CVSS 5.5 (medium), 2012-05-17: The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a…
• CVE-2011-2189 - CVSS 7.5 (high), 2011-10-10: net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which…
• CVE-2011-2925 - CVSS 4.6 (medium), 2011-09-20: Cumin in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0 records broker authentication credentials in a log file, which allows local users to…
• CVE-2010-4526 - CVSS 7.1 (high), 2011-01-11: Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a…
• CVE-2010-4179 - CVSS 7.5 (high), 2010-12-07: The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG…
• CVE-2009-5006 - CVSS 4 (medium), 2010-10-18: The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used…
• CVE-2009-5005 - CVSS 5 (medium), 2010-10-18: The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote…
• CVE-2010-3701 - CVSS 4 (medium), 2010-10-12: lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of service (stack memory exhaustion and…
• CVE-2010-3083 - CVSS 4.3 (medium), 2010-10-12: sys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG before 1.2.2 and other products, when SSL is enabled, allows remote attackers…
• CVE-2009-4133 - CVSS 6.5 (medium), 2009-12-23: Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as…