DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Red Hat Enterprise Linux: Mehrere Schwachstellen in verschiedenen Komponenten
Advisory ansehen veröffentlicht 2023-05-16
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-25567US | high7.5 | — | ||
GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The le… | ||||
| CVE-2023-25566US | high7.5 | — | ||
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsing usernames which can… | ||||
| CVE-2023-25565US | high7.5 | — | ||
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target information can trigger… | ||||
| CVE-2023-25564US | high8.2 | — | ||
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when decoding UTF16 strings.… | ||||
| CVE-2023-25563US | high7.5 | — | ||
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trig… | ||||
| CVE-2022-4515US | high7.8 | — | ||
A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the co… | ||||
| CVE-2021-3782US | medium6.6 | — | ||
An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems t… | ||||
| CVE-2021-33646US | high7.5 | — | ||
The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak. | ||||
| CVE-2021-33645US | high7.5 | — | ||
The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak. | ||||
| CVE-2021-33644US | high8.1 | — | ||
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds r… | ||||
| CVE-2021-33643US | critical9.1 | — | ||
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds r… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Red Hat Security Advisory vom 2023-05-16external
- Red Hat Security Advisory vom 2023-05-16external
- Red Hat Security Advisory vom 2023-05-16external
- Red Hat Security Advisory vom 2023-05-16external
- Amazon Linux Security Advisory ALAS2-2023-2103 vom 2023-07-01external
- Amazon Linux Security Advisory ALAS-2023-2343 vom 2023-11-16external
- Amazon Linux Security Advisory ALAS-2025-1974 vom 2025-04-30external
- Rocky Linux Security Advisory RLSA-2023:2786 vom 2026-06-27external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan