Redhat » Enterprise Linux Desktop : Security Vulnerabilities (CVSS score between 7 and 7.99)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2021-4034	787	Exec Code	2022-01-28	2023-02-13	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.
2	CVE-2021-3656	862		2022-03-04	2023-01-19	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.
3	CVE-2020-3864	346		2020-10-27	2021-05-18	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin.
4	CVE-2019-1010238	787	Exec Code Overflow	2019-07-19	2022-04-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.
5	CVE-2019-15605	444		2020-02-07	2022-11-16	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed
6	CVE-2019-14835	120	Overflow	2019-09-17	2023-02-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
7	CVE-2019-14821	787	DoS	2019-09-19	2023-02-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
8	CVE-2019-14813	863	Exec Code Bypass	2019-09-06	2020-10-16	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
9	CVE-2019-10126	122	Overflow Mem. Corr.	2019-06-14	2023-02-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences.
10	CVE-2019-10086	502		2019-08-20	2022-07-25	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
11	CVE-2019-5544	787		2019-12-06	2022-02-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
12	CVE-2019-3896	416	DoS	2019-06-19	2023-02-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A double-free can happen in idr_remove_all() in lib/idr.c in the Linux kernel 2.6 branch. An unprivileged local attacker can use this flaw for a privilege escalation or for a system crash and a denial of service (DoS).
13	CVE-2018-1000140	787	Exec Code Overflow	2018-03-23	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate.
14	CVE-2018-1000120	787	DoS Overflow	2018-03-14	2019-06-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
15	CVE-2018-1000001	787	Exec Code	2018-01-31	2019-10-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.
16	CVE-2018-19409			2018-11-21	2019-10-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used.
17	CVE-2018-18505	287		2019-02-05	2019-10-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the authentication not being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.
18	CVE-2018-18501	119	Overflow Mem. Corr.	2019-02-05	2019-04-02	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.
19	CVE-2018-18500	416		2019-02-05	2019-04-02	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.
20	CVE-2018-18498	787	Overflow	2019-02-28	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value. This leads to a possible out-of-bounds write. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.
21	CVE-2018-18493	119	Overflow	2019-02-28	2019-03-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.
22	CVE-2018-18492	416		2019-02-28	2019-03-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.
23	CVE-2018-18445	125		2018-10-17	2023-01-17	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory accesses because adjust_scalar_min_max_vals in kernel/bpf/verifier.c mishandles 32-bit right shifts.
24	CVE-2018-18311	787	Overflow	2018-12-07	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
25	CVE-2018-17456	88	Exec Code	2018-10-06	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.
26	CVE-2018-16402	415	DoS	2018-09-03	2021-11-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.
27	CVE-2018-15127	787	Exec Code	2018-12-19	2020-10-23	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution
28	CVE-2018-14665	863		2018-10-25	2019-10-22	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
29	CVE-2018-14634	190	Overflow	2018-09-25	2023-02-13	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
30	CVE-2018-14599	193		2018-08-24	2023-03-01	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.
31	CVE-2018-14362	119	Overflow	2018-07-17	2020-05-19	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
32	CVE-2018-14357	78	Exec Code	2018-07-17	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.
33	CVE-2018-14354	78	Exec Code	2018-07-17	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.
34	CVE-2018-12910	125		2018-07-05	2019-05-08	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.
35	CVE-2018-12828			2018-08-29	2019-10-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Successful exploitation could lead to privilege escalation.
36	CVE-2018-12825		Bypass	2018-08-29	2019-10-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful exploitation could lead to security mitigation bypass.
37	CVE-2018-12549	20		2019-02-11	2019-05-16	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it.
38	CVE-2018-12547	119	Overflow	2019-02-11	2019-05-16	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter. This affects existing APIs that called the functions to exceed the allocated buffer. This functions were not directly callable by non-native user code.
39	CVE-2018-12405	119	Overflow Mem. Corr.	2019-02-28	2019-03-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.
40	CVE-2018-12392			2019-02-28	2019-10-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.
41	CVE-2018-12390	119	Overflow Mem. Corr.	2019-02-28	2019-03-01	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.
42	CVE-2018-12378	416		2018-10-18	2018-12-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored. This results in a potentially exploitable crash. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.
43	CVE-2018-12377	416		2018-10-18	2018-12-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.
44	CVE-2018-12376	119	Overflow Mem. Corr.	2018-10-18	2018-12-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.
45	CVE-2018-11806	787	Overflow	2018-06-13	2021-08-04	7.2	None	Local	Low	Not required	Complete	Complete	Complete
m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.
46	CVE-2018-11236	787	Exec Code Overflow	2018-05-18	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
47	CVE-2018-10901			2018-07-26	2023-02-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.
48	CVE-2018-10850	362	DoS	2018-06-13	2019-05-15	7.1	None	Remote	Medium	Not required	None	None	Complete
389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could use this flaw to trigger a denial of service.
49	CVE-2018-10675	416	DoS	2018-05-02	2023-02-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.
50	CVE-2018-9568	704	Mem. Corr.	2018-12-06	2023-02-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.

Total number of vulnerabilities : 275 Page : 1 (This Page)2 3 4 5 6