Redhat : Security Vulnerabilities (CVSS score between 7 and 7.99)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2019-14835	120	Overflow	2019-09-17	2019-09-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
2	CVE-2019-14821	787	DoS	2019-09-19	2019-09-23	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
3	CVE-2019-14816	120	DoS Exec Code Overflow	2019-09-20	2019-09-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
4	CVE-2019-14814	120	DoS Exec Code Overflow	2019-09-20	2019-09-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
5	CVE-2019-14813	264	Exec Code Bypass	2019-09-06	2019-09-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A flaw was found in ghostscript, versions 9.x before 9.28, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
6	CVE-2019-11477	190	DoS Overflow	2019-06-18	2019-06-20	7.8	None	Remote	Low	Not required	None	None	Complete
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.
7	CVE-2019-11235	345		2019-04-22	2019-05-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used" protection mechanism, aka a "Dragonblood" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499.
8	CVE-2019-11234	287		2019-04-22	2019-05-13	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.
9	CVE-2019-10202	502		2019-10-01	2019-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525, CVE-2017-15095, CVE-2018-5968, CVE-2018-7489, CVE-2018-1000873, CVE-2019-12086 reported for FasterXML jackson-databind by implementing a whitelist approach that will mitigate these vulnerabilities and future ones alike.
10	CVE-2019-10171	400	DoS	2019-08-02	2019-10-09	7.8	None	Remote	Low	Not required	None	None	Complete
It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be able to provoke excessive CPU consumption leading to a denial of service.
11	CVE-2019-10161	284	DoS	2019-07-30	2019-10-09	7.2	None	Local	Low	Not required	Complete	Complete	Complete
It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.
12	CVE-2019-10137	22	Exec Code Dir. Trav.	2019-07-02	2019-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to the proxy's filesystem, or can execute arbitrary code in the context of the httpd process.
13	CVE-2019-8912	416		2019-02-18	2019-04-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.
14	CVE-2019-5419	400	DoS	2019-03-27	2019-06-07	7.8	None	Remote	Low	Not required	None	None	Complete
There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.
15	CVE-2019-3899	287		2019-04-22	2019-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only affects heketi as shipped with Openshift Container Platform 3.11.
16	CVE-2019-3896	415	DoS	2019-06-18	2019-07-01	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).
17	CVE-2019-3828	22	Dir. Trav.	2019-03-27	2019-04-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.
18	CVE-2018-1002105	388		2018-12-05	2019-06-28	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.
19	CVE-2018-1000140	119	Exec Code Overflow	2018-03-23	2019-05-01	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate.
20	CVE-2018-1000120	787	DoS Overflow	2018-03-14	2019-06-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
21	CVE-2018-1000001	787	Exec Code	2018-01-31	2019-10-02	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
22	CVE-2018-19409			2018-11-21	2019-10-02	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used.
23	CVE-2018-19362	502		2019-01-02	2019-09-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.
24	CVE-2018-19361	502		2019-01-02	2019-09-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.
25	CVE-2018-19360	502		2019-01-02	2019-09-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.
26	CVE-2018-19115	119	Overflow	2018-11-08	2019-05-28	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extract_status_code in lib/html.c has no validation of the status code and instead writes an unlimited amount of data to the heap.
27	CVE-2018-18751	415		2018-10-29	2018-12-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.
28	CVE-2018-18505	287		2019-02-05	2019-10-02	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.
29	CVE-2018-18501	119	Overflow Mem. Corr.	2019-02-05	2019-04-02	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.
30	CVE-2018-18500	416		2019-02-05	2019-04-02	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.
31	CVE-2018-18445	125		2018-10-17	2019-04-08	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.
32	CVE-2018-18314	119	Overflow	2018-12-07	2019-09-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
33	CVE-2018-18312	119	Overflow	2018-12-05	2019-09-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
34	CVE-2018-18311	119	Overflow	2018-12-07	2019-07-16	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
35	CVE-2018-17456	20	Exec Code	2018-10-06	2019-04-22	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.
36	CVE-2018-17246	829	Exec Code File Inclusion	2018-12-20	2019-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
37	CVE-2018-16879	417	DoS +Info	2019-01-03	2019-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting projects or inventory files.
38	CVE-2018-16850	89	Sql	2018-11-13	2019-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.
39	CVE-2018-16395			2018-11-16	2019-10-02	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.
40	CVE-2018-15688	119	Overflow	2018-10-26	2019-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.
41	CVE-2018-14721	918		2019-01-02	2019-09-26	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.
42	CVE-2018-14720	611		2019-01-02	2019-09-26	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.
43	CVE-2018-14719	502	Exec Code	2019-01-02	2019-09-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.
44	CVE-2018-14667	94	Exec Code	2018-11-06	2019-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
45	CVE-2018-14665	863		2018-10-25	2019-10-02	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
46	CVE-2018-14648	400	DoS	2018-09-28	2019-10-09	7.8	None	Remote	Low	Not required	None	None	Complete
A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the do_search() function. An unauthenticated attacker could use this flaw to provoke a denial of service.
47	CVE-2018-14634	190	Overflow	2018-09-25	2018-11-27	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
48	CVE-2018-14620	20		2018-09-10	2019-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image. Version of openstack-rabbitmq-container and openstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable.
49	CVE-2018-14362	119	Overflow	2018-07-17	2019-04-22	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
50	CVE-2018-14357	77	Exec Code	2018-07-17	2019-10-02	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.

Total number of vulnerabilities : 542 Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11