DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux: Mehrere Schwachstellen
view advisory published 2023-06-14
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen und weitere, nicht spezifizierte Auswirkungen zu verursachen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-31147US | medium6.5OT elevated | — | ||
c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom() are unavailable, c-ares uses rand() to generate random numbers used for DNS query ids. This is not a… | ||||
| CVE-2023-31130US | medium6.4 | — | ||
c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular "0::00:00:00/2" was found to cause an… | ||||
| CVE-2023-31124US | low3.7OT elevated | — | ||
c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARES_RANDOM_FILE will not be set, as seen when cross compiling aarch6… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2023-3577 vom 2023-06-22external
- RedHat Security Advisory vom 2023-06-14external
- RedHat Security Advisory vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:4033 vom 2023-07-12external
- Red Hat Security Advisory RHSA-2023:4034 vom 2023-07-12external
- Red Hat Security Advisory RHSA-2023:4035 vom 2023-07-12external
- Red Hat Security Advisory RHSA-2023:4036 vom 2023-07-12external
- Red Hat Security Advisory RHSA-2023:4039 vom 2023-07-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan