7.3 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2018-1000199	119	Exec Code Overflow Mem. Corr.	2018-05-24	2020-08-24	4.9	None	Local	Low	Not required	None	None	Complete
The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.
2	CVE-2018-1000156	20	Exec Code	2018-04-06	2019-07-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time.
3	CVE-2018-1000140	787	Exec Code Overflow	2018-03-23	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate.
4	CVE-2018-10675	416	DoS	2018-05-02	2020-07-15	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.
5	CVE-2018-5391	20	DoS	2018-09-06	2019-03-21	7.8	None	Remote	Low	Not required	None	None	Complete
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
6	CVE-2018-5390	400	DoS	2018-08-06	2020-09-18	7.8	None	Remote	Low	Not required	None	None	Complete
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
7	CVE-2018-5117			2018-06-11	2019-10-03	5.0	None	Remote	Low	Not required	None	Partial	None
If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL. This issue could result in the wrong URL being displayed as a location, which can mislead users to believe they are on a different site than the one loaded. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.
8	CVE-2018-5095	190	Overflow	2018-06-11	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.
9	CVE-2018-5091	416		2018-06-11	2018-08-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58.
10	CVE-2018-1087			2018-05-15	2019-10-09	4.6	None	Local	Low	Not required	Partial	Partial	Partial
kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest.
11	CVE-2017-1000366	119	Exec Code Overflow	2017-06-19	2020-10-15	7.2	None	Local	Low	Not required	Complete	Complete	Complete
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
12	CVE-2017-1000251	787	Exec Code Overflow	2017-09-12	2020-06-03	7.7	None	Local Network	Low	???	Complete	Complete	Complete
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.
13	CVE-2017-18344	125		2018-07-26	2020-10-15	2.1	None	Local	Low	Not required	Partial	None	None
The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE).
14	CVE-2017-9788	200	DoS +Info	2017-07-13	2021-06-06	6.4	None	Remote	Low	Not required	Partial	None	Partial
In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.
15	CVE-2017-9462	732	Exec Code	2017-06-06	2020-02-05	9.0	None	Remote	Low	???	Complete	Complete	Complete
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.
16	CVE-2017-7980	119	DoS Exec Code Overflow	2017-07-25	2021-08-04	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.
17	CVE-2017-7848	74		2018-06-11	2018-08-09	5.0	None	Remote	Low	Not required	None	Partial	None
RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird < 52.5.2.
18	CVE-2017-7809	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
19	CVE-2017-7807	20		2018-06-11	2019-10-03	5.8	None	Remote	Medium	Not required	Partial	Partial	None
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
20	CVE-2017-7802	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
21	CVE-2017-7801	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
22	CVE-2017-7800	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
23	CVE-2017-7798	94	Exec Code	2018-06-11	2018-08-09	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR < 52.3 and Firefox < 55.
24	CVE-2017-7793	416		2018-06-11	2018-08-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.
25	CVE-2017-7792	119	Overflow	2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
26	CVE-2017-7791	20		2018-06-11	2018-08-03	5.0	None	Remote	Low	Not required	None	Partial	None
On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
27	CVE-2017-7787	200	Bypass +Info	2018-06-11	2018-08-03	5.0	None	Remote	Low	Not required	Partial	None	None
Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
28	CVE-2017-7786	119	Overflow	2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
29	CVE-2017-7785	119	Overflow	2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
30	CVE-2017-7784	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
31	CVE-2017-7758	125		2018-06-11	2018-08-03	6.4	None	Remote	Low	Not required	Partial	None	Partial
An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
32	CVE-2017-7754	125		2018-06-11	2018-08-03	5.0	None	Remote	Low	Not required	Partial	None	None
An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
33	CVE-2017-7753	125		2018-06-11	2018-08-03	6.4	None	Remote	Low	Not required	Partial	None	Partial
An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
34	CVE-2017-7752	416		2018-06-11	2018-08-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are handled. This results in a potentially exploitable crash but would require specific user interaction to trigger. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
35	CVE-2017-7751	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
36	CVE-2017-7750	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older window if that window has been replaced in the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
37	CVE-2017-7749	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
38	CVE-2017-6011	125	Overflow	2017-02-16	2019-03-12	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was observed in the "simple_vec" function in the "extract.c" source file. This affects icotool.
39	CVE-2017-6010	119	Overflow	2017-02-16	2019-03-12	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extract_icons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash.
40	CVE-2017-6009	119	Overflow	2017-02-16	2019-03-12	4.3	None	Remote	Medium	Not required	None	None	Partial
An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "decode_ne_resource_id" function in the "restable.c" source file. This is happening because the "len" parameter for memcpy is not checked for size and thus becomes a negative integer in the process, resulting in a failed memcpy. This affects wrestool.
41	CVE-2017-5472	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
42	CVE-2017-5470	119	Overflow Mem. Corr.	2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
43	CVE-2017-5469	119	Overflow	2018-06-11	2018-08-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
44	CVE-2017-5466	79	XSS	2018-06-11	2018-08-09	4.3	None	Remote	Medium	Not required	None	Partial	None
If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "data:text/html" page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.
45	CVE-2017-5465	125		2018-06-11	2018-08-07	6.4	None	Remote	Low	Not required	Partial	None	Partial
An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
46	CVE-2017-5464	119	Overflow Mem. Corr.	2018-06-11	2018-08-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
47	CVE-2017-5460	416		2018-06-11	2018-08-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
48	CVE-2017-5459	119	Overflow	2018-06-11	2018-08-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
49	CVE-2017-5456	732	Bypass	2018-06-11	2019-10-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.
50	CVE-2017-5455		Exec Code	2018-06-11	2019-10-03	5.0	None	Remote	Low	Not required	None	Partial	None
The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

Total number of vulnerabilities : 177 Page : 1 (This Page)2 3 4