9.0 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2023-27561	706		2023-03-03	2023-03-10	0.0	None	???	???	???	???	???	???
runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn two containers with custom volume-mount configurations, and be able to run custom images. NOTE: this issue exists because of a CVE-2019-19921 regression.
2	CVE-2023-1095	476		2023-02-28	2023-03-06	0.0	None	???	???	???	???	???	???
In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference.
3	CVE-2023-0361	203		2023-02-15	2023-03-18	0.0	None	???	???	???	???	???	???
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.
4	CVE-2022-34303		Exec Code Bypass	2022-08-26	2022-09-01	0.0	None	???	???	???	???	???	???
A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.
5	CVE-2022-34302		Exec Code Bypass	2022-08-26	2022-09-01	0.0	None	???	???	???	???	???	???
A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.
6	CVE-2022-34301		Exec Code Bypass	2022-08-26	2022-09-01	0.0	None	???	???	???	???	???	???
A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.
7	CVE-2022-25310	119	DoS Overflow	2022-09-06	2023-02-12	0.0	None	???	???	???	???	???	???
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw allows an attacker to pass a specially crafted file to Fribidi, leading to a crash and causing a denial of service.
8	CVE-2022-25309	122	DoS Overflow	2022-09-06	2023-02-12	0.0	None	???	???	???	???	???	???
A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and causing a denial of service.
9	CVE-2022-25308	121	DoS Overflow	2022-09-06	2023-02-12	0.0	None	???	???	???	???	???	???
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which leads to a possible memory leak or a denial of service.
10	CVE-2022-4904	20	DoS Overflow	2023-03-06	2023-03-14	0.0	None	???	???	???	???	???	???
A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.
11	CVE-2022-4743	401	DoS	2023-01-12	2023-02-09	0.0	None	???	???	???	???	???	???
A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.
12	CVE-2022-4285	476	DoS	2023-01-27	2023-02-07	0.0	None	???	???	???	???	???	???
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.
13	CVE-2022-4283	416	Exec Code	2022-12-14	2023-02-23	0.0	None	???	???	???	???	???	???
A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.
14	CVE-2022-3821	193	DoS	2022-11-08	2022-12-02	0.0	None	???	???	???	???	???	???
An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.
15	CVE-2022-3715	787	Overflow	2023-01-05	2023-02-24	0.0	None	???	???	???	???	???	???
A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.
16	CVE-2022-3707	415		2023-03-06	2023-03-14	0.0	None	???	???	???	???	???	???
A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash the system.
17	CVE-2022-3560	22	+Priv Dir. Trav.	2023-02-02	2023-02-10	0.0	None	???	???	???	???	???	???
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
18	CVE-2022-3500	248		2022-11-22	2023-02-01	0.0	None	???	???	???	???	???	???
A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the possibility that a rogue agent could create errors on the verifier that stopped attestation attempts for that host leaving it in an attested state but not verifying that anymore.
19	CVE-2022-3424	416		2023-03-06	2023-03-13	0.0	None	???	???	???	???	???	???
A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.
20	CVE-2022-2990	842	Exec Code	2022-09-13	2023-02-12	0.0	None	???	???	???	???	???	???
An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
21	CVE-2022-2989	842	Exec Code	2022-09-13	2023-02-12	0.0	None	???	???	???	???	???	???
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
22	CVE-2022-2964	119	Overflow	2022-09-09	2023-01-20	0.0	None	???	???	???	???	???	???
A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.
23	CVE-2022-2963	401		2022-10-14	2022-10-18	0.0	None	???	???	???	???	???	???
A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdopts_parse that can cause a crash or segmentation fault.
24	CVE-2022-2873	131		2022-08-22	2023-03-03	0.0	None	???	???	???	???	???	???
An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the I2C_SMBUS_BLOCK_DATA (with the ioctl I2C_SMBUS) with malicious input data. This flaw allows a local user to crash the system.
25	CVE-2022-2850	476	DoS	2022-10-14	2023-02-12	0.0	None	???	???	???	???	???	???
A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.
26	CVE-2022-2639	787		2022-09-01	2023-01-20	0.0	None	???	???	???	???	???	???
An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.
27	CVE-2022-2625	1321		2022-08-18	2022-12-02	0.0	None	???	???	???	???	???	???
A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites, this flaw allows an attacker to run arbitrary code as the victim role, which may be a superuser.
28	CVE-2022-2509	415		2022-08-01	2022-08-19	0.0	None	???	???	???	???	???	???
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.
29	CVE-2022-2393	285		2022-07-14	2023-02-12	0.0	None	???	???	???	???	???	???
A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not be able to decrypt message content.
30	CVE-2022-2211	120	DoS	2022-07-12	2023-02-12	4.3	None	Remote	Medium	Not required	None	None	Partial
A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or malicious actor.
31	CVE-2022-2153	476	DoS	2022-08-31	2022-11-21	0.0	None	???	???	???	???	???	???
A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.
32	CVE-2022-2132		DoS	2022-08-31	2022-09-06	0.0	None	???	???	???	???	???	???
A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.
33	CVE-2022-2078	121	DoS Overflow	2022-06-30	2022-10-26	2.1	None	Local	Low	Not required	None	None	Partial
A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.
34	CVE-2022-1998	416		2022-06-09	2022-10-05	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user(). A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
35	CVE-2022-1949	863	Bypass	2022-06-02	2022-06-13	5.0	None	Remote	Low	Not required	Partial	None	None
An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.
36	CVE-2022-1852	476	DoS	2022-06-30	2022-10-26	2.1	None	Local	Low	Not required	None	None	Partial
A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU.
37	CVE-2022-1789	476		2022-06-02	2022-06-15	6.9	None	Local	Medium	Not required	Complete	Complete	Complete
With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not set and the result is a NULL pointer dereference.
38	CVE-2022-1708	400	Exec Code	2022-06-07	2022-06-14	7.8	None	Remote	Low	Not required	None	None	Complete
A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command. The highest threat from this vulnerability is system availability.
39	CVE-2022-1706	863		2022-05-17	2022-10-11	3.5	None	Remote	Medium	???	Partial	None	None
A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data confidentiality. Possible workaround is to not put secrets in the Ignition config.
40	CVE-2022-1652	416	DoS Exec Code	2022-06-02	2023-03-01	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
41	CVE-2022-1587	125		2022-05-16	2023-03-16	6.4	None	Remote	Low	Not required	Partial	None	Partial
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.
42	CVE-2022-1586	125		2022-05-16	2023-03-16	6.4	None	Remote	Low	Not required	Partial	None	Partial
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.
43	CVE-2022-1462	362		2022-06-02	2022-10-29	3.3	None	Local	Medium	Not required	Partial	None	Partial
An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.
44	CVE-2022-1355	121	DoS Overflow	2022-08-31	2023-02-23	0.0	None	???	???	???	???	???	???
A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.
45	CVE-2022-1354	125	DoS Overflow	2022-08-31	2023-02-23	0.0	None	???	???	???	???	???	???
A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.
46	CVE-2022-1263	476	DoS	2022-08-31	2022-09-07	0.0	None	???	???	???	???	???	???
A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.
47	CVE-2022-1247	362		2022-08-31	2022-09-06	0.0	None	???	???	???	???	???	???
An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many objects are using the rose_neigh. When a user wants to delete a rose_route via rose_ioctl(), the rose driver calls rose_del_node() and removes neighbours only if their “count” and “use” are zero.
48	CVE-2022-1198	416		2022-08-29	2022-09-06	0.0	None	???	???	???	???	???	???
A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space.
49	CVE-2022-1184	416	DoS	2022-08-29	2023-02-12	0.0	None	???	???	???	???	???	???
A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.
50	CVE-2022-1158	416	DoS	2022-08-05	2023-02-14	0.0	None	???	???	???	???	???	???
A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_pgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and potentially corrupt the kernel, resulting in a denial of service condition.

Total number of vulnerabilities : 68 Page : 1 (This Page)2