logging 5.8 Schwachstellen (CVE)

7.5Hoch

CVE-2024-12085 vor 1 Jahr

Rsync: info leak via uninitialized stack contents

rsync; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitializ…

8.6%EPSS

6.5Mittel

CVE-2023-6536 vor 2 Jahren

Kernel: null pointer dereference in __nvmet_req_complete

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kerne…

1.5%EPSS

6.5Mittel

CVE-2023-6535 vor 2 Jahren

Kernel: null pointer dereference in nvmet_tcp_execute_request

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kerne…

1.5%EPSS

6.5Mittel

CVE-2023-6356 vor 2 Jahren

Kernel: null pointer dereference in nvmet_tcp_build_iovec

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing ke…

1.5%EPSS

7.0Hoch

CVE-2024-0646 vor 2 Jahren

Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

kernel; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privile…

7.5Hoch

CVE-2024-0567 vor 2 Jahren

Gnutls: rejects certificate chain with distributed trust

gnutls; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support; Red Hat RHODF-4.15-RHEL-9

A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote cli…

1.4%EPSS

7.5Hoch

CVE-2024-0553 vor 2 Jahren

Gnutls: incomplete fix for cve-2023-5981

gnutls; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support

A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-chann…

1.6%EPSS

7.8Hoch

CVE-2024-0193 vor 2 Jahren

Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation

kernel; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions; Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or …

7.1Hoch

CVE-2023-6610 vor 2 Jahren

Kernel: oob access in smb2_dump_detail

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

7.1Hoch

CVE-2023-6606 vor 2 Jahren

Kernel: out-of-bounds read vulnerability in smbcalcsize

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

5.9Mittel

CVE-2023-5981 vor 2 Jahren

Gnutls: timing side-channel in the rsa-psk authentication

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

1.3%EPSS