enterprise linux 7 Schwachstellen (CVE)

7.5Hoch

CVE-2026-81665 vor 2 Monaten

Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent at…

8.6Hoch

CVE-2026-10649 vor 4 Monaten

Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause …

9.0Kritisch

CVE-2026-4408 vor 5 Monaten

Samba: remote code execution in samr

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controll…

2.5%EPSS

9.0Kritisch

CVE-2026-4480 vor 5 Monaten

Samba: samba: remote code execution in printing subsystem via unescaped job description

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacke…

14%EPSS

5.9Mittel

CVE-2026-34956 vor 6 Monaten

Openvswitch: open vswitch: denial of service via malformed ftp epasv command

Red Hat Fast Datapath for RHEL 7; Red Hat Fast Datapath for RHEL 8; Red Hat Fast Datapath for RHEL 9; Red Hat Red Hat Enterprise Linux 7

A flaw was found in Open vSwitch. When Open vSwitch is configured with a conntrack flow using FTP helpers over the userspace datapath, a remote attacker can send a specially crafted FTP stream with an EPASV command exceeding 255 characters. This heap access e…

6.5Mittel

CVE-2026-5265 vor 6 Monaten

Ovn: ovn: heap over-read in icmp error response generation

Red Hat Fast Datapath for Red Hat Enterprise Linux 10; Red Hat Fast Datapath for Red Hat Enterprise Linux 8; Red Hat Fast Datapath for Red Hat Enterprise Linux 9; Red Hat Fast Datapath for RHEL 7

When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length (ip_tot_len for IPv4, ip6_plen for IPv6) without validati…

7.5Hoch

CVE-2026-35092 vor 7 Monaten

Corosync: corosync: denial of service via integer overflow in join message validation

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a deni…

1.0%EPSS

8.2Hoch

CVE-2026-35091 vor 7 Monaten

Corosync: corosync: denial of service and information disclosure via crafted udp packet

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-…

7.4Hoch

CVE-2024-11614 vor 1 Jahr

Dpdk: denial of service from malicious guest on hypervisors using dpdk vhost library

dpdk; Red Hat Fast Datapath for Red Hat Enterprise Linux 8; Red Hat Fast Datapath for Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 8

An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows…

5.5Mittel

CVE-2024-52337 vor 1 Jahr

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

tuned; Red Hat Fast Datapath for Red Hat Enterprise Linux 7; Red Hat Fast Datapath for Red Hat Enterprise Linux 8; Red Hat Fast Datapath for Red Hat Enterprise Linux 9

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mi…

7.8Hoch

CVE-2024-52336 vor 1 Jahr

Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root

tuned; Red Hat Fast Datapath for Red Hat Enterprise Linux 8; Red Hat Fast Datapath for Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 9

A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with `script_pre…

8.1Hoch

CVE-2024-3183 vor 2 Jahren

Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

freeipa; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support

A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key. This key is different for each new session, which protects it from brute force attacks. However, the ticket it contains is encrypted using the t…

2.1%EPSS

7.5Hoch

CVE-2023-4727 vor 2 Jahren

Ca: token authentication bypass vulnerability

keycloak; Red Hat Red Hat Certificate System 10.4 EUS for RHEL-8; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, wh…

7.5Hoch

CVE-2024-3657 vor 2 Jahren

389-ds-base: potential denial of service via specially crafted kerberos as-req request

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.7 for RHEL 8; Red Hat Red Hat Directory Server 11.8 for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service

1.3%EPSS

5.7Mittel

CVE-2024-2199 vor 2 Jahren

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

389-ds-base; Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8; Red Hat Red Hat Directory Server 11.8 for RHEL 8; Red Hat Red Hat Directory Server 11.9 for RHEL 8

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.

7.8Hoch

CVE-2024-31083 vor 2 Jahren

Xorg-x11-server: use-after-free in procrenderaddglyphs

xorg-x11-server; Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the …

1.9%EPSS

7.3Hoch

CVE-2024-31081 vor 2 Jahren

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

xorg-server; Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly …

7.3Hoch

CVE-2024-31080 vor 2 Jahren

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

xorg-server; Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly …

7.8Hoch

CVE-2024-21886 vor 2 Jahren

Xorg-x11-server: heap buffer overflow in disabledevice

xorg-server; Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.

1.4%EPSS

7.8Hoch

CVE-2024-21885 vor 2 Jahren

Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent

xorg-server; xwayland; Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Red Hat Enterprise Linux 7

A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which ma…

1.4%EPSS

7.5Hoch

CVE-2023-3966 vor 2 Jahren

Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet

openvswitch; Red Hat Fast Datapath for RHEL 7; Red Hat Fast Datapath for RHEL 8; Red Hat Fast Datapath for RHEL 9

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is enabled.

1.3%EPSS

7.8Hoch

CVE-2024-0229 vor 2 Jahren

Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access

xorg-server; Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation (if the serv…

1.2%EPSS

5.1Mittel

CVE-2023-40551 vor 2 Jahren

Shim: out of bounds read when parsing mz binaries

Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service

A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during the system's boot phase.

6.2Mittel

CVE-2023-40549 vor 2 Jahren

Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file

Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service

An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an attacker to load a crafted PE binary, triggering the issue and crashing Shim, resulting in a denial of service.

6.2Mittel

CVE-2023-40546 vor 2 Jahren

Shim: out-of-bounds read printing error messages

Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the forma…