Redhat » Enterprise Linux Workstation : Security Vulnerabilities

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2022-4254	90		2023-02-01	2023-02-09	0.0	None	???	???	???	???	???	???
sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
2	CVE-2022-2739	200	+Info	2022-09-01	2023-02-12	0.0	None	???	???	???	???	???	???
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive information stored in environment variables.
3	CVE-2022-2738	416	Exec Code	2022-09-01	2023-02-12	0.0	None	???	???	???	???	???	???
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to crash or cause potential code execution in Go applications that use the Go GPGME wrapper library, under certain conditions, during GPG signature verification.
4	CVE-2022-1227	269	DoS	2022-04-29	2022-07-23	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
5	CVE-2022-0330	281		2022-03-25	2022-12-07	4.6	None	Local	Low	Not required	Partial	Partial	Partial
A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.
6	CVE-2021-44142	125	Exec Code	2022-02-21	2022-02-23	9.0	None	Remote	Low	???	Complete	Complete	Complete
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
7	CVE-2021-20233	787		2021-03-03	2022-04-18	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually requires 4 characters which allows an attacker to corrupt memory by one byte for each quote in the input. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
8	CVE-2021-20225	787		2021-03-03	2022-04-18	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
9	CVE-2021-4091	415		2022-02-18	2023-04-24	5.0	None	Remote	Low	Not required	None	None	Partial
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker could send a series of search requests, forcing the server to behave unexpectedly, and crash.
10	CVE-2021-4034	787	Exec Code	2022-01-28	2023-02-13	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.
11	CVE-2021-3672	79	XSS	2021-11-23	2022-10-18	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.
12	CVE-2021-3656	862		2022-03-04	2023-01-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.
13	CVE-2021-3622	400	Overflow	2021-12-23	2022-01-10	4.3	None	Remote	Medium	Not required	None	None	Partial
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get_children() function, leading to a stack overflow. The highest threat from this vulnerability is to system availability.
14	CVE-2020-27779			2021-03-03	2022-10-21	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's memory layout. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
15	CVE-2020-27749	121	Exec Code Overflow	2021-03-03	2022-05-13	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that references a variable with a sufficiently large payload, it is possible to overflow the stack buffer, corrupt the stack frame and control execution which could also circumvent Secure Boot protections. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
16	CVE-2020-25719	362		2022-02-18	2022-10-21	9.0	None	Remote	Low	???	Complete	Complete	Complete
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
17	CVE-2020-25717	20		2022-02-18	2022-02-25	8.5	None	Remote	Low	???	Complete	Complete	None
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.
18	CVE-2020-25647	787	Exec Code Mem. Corr. Bypass	2021-03-03	2022-05-13	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the Secure Boot mechanism. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
19	CVE-2020-25632	416	Exec Code Bypass	2021-03-03	2022-05-13	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
20	CVE-2020-14372	184	Exec Code	2021-03-03	2022-07-22	6.2	None	Local	High	Not required	Complete	Complete	Complete
A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table (SSDT) containing code to overwrite the Linux kernel lockdown variable content directly into memory. The table is further loaded and executed by the kernel, defeating its Secure Boot lockdown and allowing the attacker to load unsigned code. The highest threat from this vulnerability is to data confidentiality and integrity, as well as system availability.
21	CVE-2020-10531	787	Overflow	2020-03-12	2022-08-12	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
22	CVE-2020-8945	416	Exec Code	2020-02-12	2022-10-18	5.1	None	Remote	High	Not required	Partial	Partial	Partial
The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.
23	CVE-2020-6851	787	Overflow	2020-01-13	2022-04-29	5.0	None	Remote	Low	Not required	None	None	Partial
OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.
24	CVE-2020-6418	843		2020-02-27	2022-03-31	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
25	CVE-2020-6416	20		2020-02-11	2022-03-31	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
26	CVE-2020-6415	787		2020-02-11	2022-03-31	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
27	CVE-2020-6408		+Info	2020-02-11	2022-03-31	4.3	None	Remote	Medium	Not required	Partial	None	None
Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML page.
28	CVE-2020-6406	416		2020-02-11	2022-03-31	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
29	CVE-2020-6404	787		2020-02-11	2022-03-31	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
30	CVE-2020-6403			2020-02-11	2022-03-31	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
31	CVE-2020-6402	20	Exec Code	2020-02-11	2021-09-16	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.
32	CVE-2020-6400	203		2020-02-11	2022-03-31	4.3	None	Remote	Medium	Not required	Partial	None	None
Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
33	CVE-2020-6398	908		2020-02-11	2022-03-31	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
34	CVE-2020-6397			2020-02-11	2022-03-31	4.3	None	Remote	Medium	Not required	None	Partial	None
Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.
35	CVE-2020-6396			2020-02-11	2022-04-11	4.3	None	Remote	Medium	Not required	None	Partial	None
Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
36	CVE-2020-6394		Bypass	2020-02-11	2022-04-06	5.8	None	Remote	Medium	Not required	Partial	Partial	None
Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page.
37	CVE-2020-6393	862		2020-02-11	2022-04-06	4.3	None	Remote	Medium	Not required	Partial	None	None
Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
38	CVE-2020-6392	79	XSS Bypass	2020-02-11	2022-04-06	4.3	None	Remote	Medium	Not required	None	Partial	None
Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
39	CVE-2020-6391	79	XSS Bypass	2020-02-11	2022-04-11	4.3	None	Remote	Medium	Not required	None	Partial	None
Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content security policy via a crafted HTML page.
40	CVE-2020-6390	787	Mem. Corr.	2020-02-11	2022-04-11	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
41	CVE-2020-6386	416		2020-02-27	2022-03-31	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
42	CVE-2020-6385	754	Bypass	2020-02-11	2022-04-11	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page.
43	CVE-2020-6384	416		2020-02-27	2022-03-31	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
44	CVE-2020-6383	843		2020-02-27	2022-03-31	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
45	CVE-2020-6382	843		2020-02-11	2022-04-11	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
46	CVE-2020-6381	190	Overflow	2020-02-11	2022-04-11	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
47	CVE-2020-6377	416		2020-01-10	2022-04-08	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
48	CVE-2020-3864	346		2020-10-27	2021-05-18	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.
49	CVE-2020-3757	843	Exec Code	2020-02-13	2021-09-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
50	CVE-2020-2659		DoS	2020-01-15	2021-12-06	4.3	None	Remote	Medium	Not required	None	None	Partial
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Total number of vulnerabilities : 1780 Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36