redhat virtualization güvenlik açıkları (CVE)

redhat virtualization için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

5 sonuç

7.8Yüksek

CVE-2023-4911 KEV 3 yıl önce

Glibc: buffer overflow in ld.so leading to privilege escalation

glibc; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binar…

64%EPSS

7.8Yüksek

CVE-2021-3560 KEV 4 yıl önce

Red Hat Polkit Incorrect Authorization Vulnerability

polkit

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local admini…

22%EPSS

9.8Kritik

CVE-2014-7169 KEV 12 yıl önce

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

gnu bash; arista eos; oracle linux; qnap qts

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as…

100%EPSS

9.8Kritik

CVE-2014-6271 KEV 12 yıl önce

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

gnu bash; arista eos; oracle linux; qnap qts

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature…

100%EPSS

7.5Yüksek

CVE-2014-0160 KEV 12 yıl önce

OpenSSL Information Disclosure Vulnerability

openssl openssl; filezilla-project filezilla server; siemens application processing engine firmware; siemens cp 1543-1 firmware

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, …

100%EPSS