DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Red Hat Enterprise Linux: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2019-08-06
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
01
beschreibt (99)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-5735US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none | ||||
| CVE-2017-5734US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none | ||||
| CVE-2017-5733US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none | ||||
| CVE-2017-5732US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none | ||||
| CVE-2017-5731US | high7.8 | — | ||
Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escalation of privilege via local access. | ||||
| CVE-2019-10153US | medium5.0 | — | ||
A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exce… | ||||
| CVE-2019-10193US | high7.2 | — | ||
A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperlog… | ||||
| CVE-2019-10192US | high7.2 | — | ||
A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a… | ||||
| CVE-2019-9755US | high7.0 | — | ||
An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially cr… | ||||
| CVE-2018-12404US | medium5.9 | — | ||
A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack… | ||||
| CVE-2019-11236US | medium6.1 | — | ||
In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter. | ||||
| CVE-2019-0161US | medium5.5 | — | ||
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access. | ||||
| CVE-2019-0160US | critical9.8 | — | ||
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access. | ||||
| CVE-2018-3613US | high7.8 | — | ||
Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/… | ||||
| CVE-2018-12181US | medium6.0 | — | ||
Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access. | ||||
| CVE-2018-16838US | medium5.4 | — | ||
A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict permission settings on the server side, SSSD will allow all a… | ||||
| CVE-2018-14498US | medium6.5 | — | ||
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash)… | ||||
| CVE-2019-8383US | high7.8 | — | ||
An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8 in lib/png.c. It can be triggered by sending a crafted file… | ||||
| CVE-2019-8379US | high7.8 | — | ||
An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a craft… | ||||
| CVE-2019-7665US | medium5.5 | — | ||
In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault lea… | ||||
20 von 99 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CentOS Security Advisory CESA-2019:2101 vom 2019-09-18external
- CentOS Security Advisory CESA-2019:2258 vom 2019-09-18external
- CentOS Security Advisory CESA-2020:0471 vom 2020-02-11external
- CentOS Security Advisory CESA-2020:0850 vom 2020-03-25external
- CentOS Security Advisory CESA-2020:0851 vom 2020-03-25external
- Oracle Linux Security Advisory ELSA-2019-2052 vom 2019-08-14external
- Oracle Linux Security Advisory ELSA-2019-2177 vom 2019-08-16external
- Oracle Linux Security Advisory ELSA-2019-2178 vom 2019-08-14external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan