DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux: Mehrere Schwachstellen
view advisory published 2024-05-01
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, Cross-Site Scripting (XSS)-Angriffe durchzuführen oder einen Men-in-the-Middle-Angriff auszuführen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-3019US | — | — | ||
A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis… | ||||
| CVE-2024-28102US | — | — | ||
JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.6, an attacker can cause a denial of service attack by passing in a malicious J… | ||||
| CVE-2024-2307US | — | — | ||
A flaw was found in osbuild-composer. A condition can be triggered that disables GPG verification for package repositories, which can expose the build phase to a Man-in-the-Middle… | ||||
| CVE-2024-22195US | medium6.1 | — | ||
Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into… | ||||
| CVE-2023-52323US | medium5.9 | — | ||
PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack. | ||||
| CVE-2023-45897US | medium5.5 | — | ||
exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set. | ||||
| CVE-2023-45803US | medium4.2 | — | ||
urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 aft… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2024-3264 vom 2024-05-30external
- RedHat Security Advisory vom 2024-05-01external
- Red Hat Security Advisory RHSA-2024:11189 vom 2024-12-17external
- Red Hat Security Advisory RHSA-2024:11238 vom 2024-12-17external
- RedHat Security Advisory vom 2024-05-01external
- RedHat Security Advisory vom 2024-05-01external
- RedHat Security Advisory vom 2024-05-01external
- RedHat Security Advisory vom 2024-05-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan