DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux: Mehrere Schwachstellen in verschiedenen Komponenten
view advisory published 2023-05-16
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-25567US | high7.5 | — | ||
GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The le… | ||||
| CVE-2023-25566US | high7.5 | — | ||
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsing usernames which can… | ||||
| CVE-2023-25565US | high7.5 | — | ||
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target information can trigger… | ||||
| CVE-2023-25564US | high8.2 | — | ||
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when decoding UTF16 strings.… | ||||
| CVE-2023-25563US | high7.5 | — | ||
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trig… | ||||
| CVE-2022-4515US | high7.8 | — | ||
A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the co… | ||||
| CVE-2021-3782US | medium6.6 | — | ||
An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems t… | ||||
| CVE-2021-33646US | high7.5 | — | ||
The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak. | ||||
| CVE-2021-33645US | high7.5 | — | ||
The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak. | ||||
| CVE-2021-33644US | high8.1 | — | ||
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds r… | ||||
| CVE-2021-33643US | critical9.1 | — | ||
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds r… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory vom 2023-05-16external
- Red Hat Security Advisory vom 2023-05-16external
- Red Hat Security Advisory vom 2023-05-16external
- Red Hat Security Advisory vom 2023-05-16external
- Amazon Linux Security Advisory ALAS2-2023-2103 vom 2023-07-01external
- Amazon Linux Security Advisory ALAS-2023-2343 vom 2023-11-16external
- Amazon Linux Security Advisory ALAS-2025-1974 vom 2025-04-30external
- Rocky Linux Security Advisory RLSA-2023:2786 vom 2026-06-27external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan