Redhat » Enterprise Linux Workstation : Security Vulnerabilities (CVSS score between 4 and 4.99)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2019-10168	284		2019-08-02	2019-10-09	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
2	CVE-2019-10167	284		2019-08-02	2019-10-09	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an arbitrary path for this argument, causing libvirtd to execute a crafted executable with its own privileges.
3	CVE-2019-10166	284		2019-08-02	2019-10-09	4.6	None	Local	Low	Not required	Partial	Partial	Partial
It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDefineXML() API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would execute an arbitrary program when the domain was resumed.
4	CVE-2019-10153	172		2019-07-30	2019-10-09	4.0	None	Remote	Low	Single system	None	None	Partial
A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.
5	CVE-2019-8308	20		2019-02-12	2019-08-31	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script sandbox, which allows attackers to modify a host-side executable file.
6	CVE-2019-7221	416		2019-03-21	2019-06-14	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
7	CVE-2019-6454	119	DoS Overflow	2019-03-21	2019-06-04	4.9	None	Local	Low	Not required	None	None	Complete
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
8	CVE-2019-6133	284	Bypass	2019-01-11	2019-05-28	4.4	None	Local	Medium	Not required	Partial	Partial	Partial
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c.
9	CVE-2019-5781	20		2019-02-19	2019-04-18	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
10	CVE-2019-5780	20		2019-02-19	2019-04-18	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events.
11	CVE-2019-5779	264	Bypass	2019-02-19	2019-04-18	4.3	None	Remote	Medium	Not required	Partial	None	None
Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
12	CVE-2019-5778	79	XSS Bypass	2019-02-19	2019-04-18	4.3	None	Remote	Medium	Not required	None	Partial	None
A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to bypass extension permission checks for privileged pages via a crafted Chrome Extension.
13	CVE-2019-5777	20		2019-02-19	2019-04-18	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
14	CVE-2019-5776	20		2019-02-19	2019-04-18	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
15	CVE-2019-5775	20		2019-02-19	2019-04-18	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
16	CVE-2019-5773	20	Bypass	2019-02-19	2019-04-18	4.3	None	Remote	Medium	Not required	None	Partial	None
Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.
17	CVE-2019-5768	254		2019-02-19	2019-04-18	4.3	None	Remote	Medium	Not required	Partial	None	None
DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.
18	CVE-2019-5767	275		2019-02-19	2019-04-18	4.3	None	Remote	Medium	Not required	Partial	None	None
Insufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0.3626.81 allowed an attacker who convinced the user to install a malicious application to access privacy/security sensitive web APIs via a crafted APK.
19	CVE-2019-5766	264		2019-02-19	2019-04-18	4.3	None	Remote	Medium	Not required	Partial	None	None
Incorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
20	CVE-2019-5765	200	+Info	2019-02-19	2019-04-18	4.3	None	Remote	Medium	Not required	Partial	None	None
An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent.
21	CVE-2019-5754	310		2019-02-19	2019-04-17	4.3	None	Remote	Medium	Not required	Partial	None	None
Implementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an attacker running or able to cause use of a proxy server to obtain cleartext of transport encryption via malicious network proxy.
22	CVE-2019-3838	284		2019-03-25	2019-05-07	4.3	None	Remote	Medium	Not required	Partial	None	None
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
23	CVE-2019-3835	284		2019-03-25	2019-05-07	4.3	None	Remote	Medium	Not required	Partial	None	None
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
24	CVE-2019-2422	284		2019-01-16	2019-06-03	4.3	None	Remote	Medium	Not required	Partial	None	None
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
25	CVE-2018-1002200	22	Dir. Trav.	2018-07-25	2019-10-09	4.3	None	Remote	Medium	Not required	None	Partial	None
plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
26	CVE-2018-1000808	404	DoS	2018-10-08	2019-04-02	4.3	None	Remote	Medium	Not required	None	None	Partial
Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection. Anything that would cause the calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been fixed in 17.5.0.
27	CVE-2018-1000199	388	Exec Code Mem. Corr.	2018-05-24	2018-06-27	4.9	None	Local	Low	Not required	None	None	Complete
The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.
28	CVE-2018-19039	200	+Info	2018-12-13	2019-05-02	4.0	None	Remote	Low	Single system	Partial	None	None
Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.
29	CVE-2018-18506	254		2019-02-05	2019-05-13	4.3	None	Remote	Medium	Not required	None	Partial	None
When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.
30	CVE-2018-18357	20		2018-12-11	2019-08-17	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
31	CVE-2018-18355	20		2018-12-11	2019-08-17	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
32	CVE-2018-18353			2018-12-11	2019-10-02	4.3	None	Remote	Medium	Not required	None	Partial	None
Failure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on Android prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of an auto dialog via a crafted HTML page.
33	CVE-2018-18352	732	Bypass	2018-12-11	2019-10-02	4.3	None	Remote	Medium	Not required	Partial	None	None
Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass same origin policy for audio content via a crafted HTML page.
34	CVE-2018-18351	20	Bypass	2018-12-11	2019-08-17	4.3	None	Remote	Medium	Not required	Partial	None	None
Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass SameSite cookie policy via a crafted HTML page.
35	CVE-2018-18350		Bypass	2018-12-11	2019-10-02	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass content security policy via a crafted HTML page.
36	CVE-2018-18349	732		2018-12-11	2019-10-02	4.3	None	Remote	Medium	Not required	Partial	None	None
Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system via a crafted Chrome Extension.
37	CVE-2018-18348	20		2018-12-11	2019-08-17	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
38	CVE-2018-18345		Bypass	2018-12-11	2019-10-02	4.3	None	Remote	Medium	Not required	Partial	None	None
Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the renderer process to bypass site isolation protections via a crafted HTML page.
39	CVE-2018-18344	20		2018-12-11	2019-08-17	4.3	None	Remote	Medium	Not required	Partial	None	None
Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.
40	CVE-2018-17972	269		2018-10-03	2019-10-02	4.9	None	Local	Low	Not required	Complete	None	None
An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents.
41	CVE-2018-17477	20		2018-11-14	2018-12-21	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page.
42	CVE-2018-17476	20		2018-11-14	2018-12-21	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.
43	CVE-2018-17475	20		2018-11-14	2018-12-19	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
44	CVE-2018-17471	20		2018-11-14	2018-12-21	4.3	None	Remote	Medium	Not required	None	Partial	None
Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.
45	CVE-2018-17470	119	Overflow	2019-01-09	2019-01-15	4.3	None	Remote	Medium	Not required	None	None	Partial
A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
46	CVE-2018-17468	200	+Info	2018-11-14	2018-12-19	4.3	None	Remote	Medium	Not required	Partial	None	None
Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obtain cross origin URLs via a crafted HTML page.
47	CVE-2018-17467	20		2018-11-14	2018-12-19	4.3	None	Remote	Medium	Not required	None	Partial	None
Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
48	CVE-2018-16865	119	Exec Code Overflow	2019-01-11	2019-08-07	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.
49	CVE-2018-16864	119	Overflow	2019-01-11	2019-08-07	4.6	None	Local	Low	Not required	Partial	Partial	Partial
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable.
50	CVE-2018-16542	388		2018-09-05	2018-11-25	4.3	None	Remote	Medium	Not required	None	None	Partial
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the interpreter.

Total number of vulnerabilities : 265 Page : 1 (This Page)2 3 4 5 6