CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,370 CVEs published, 344 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,370
Show in the list
Critical, last 7 days
344
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list

Showing CVEs that name the product redhat:enterprise_linux. Show all products

849 CVEs, showing 751 to 800PreviousPage 16 of 17Next
CVESeverityTitlePublished
CVE-2023-32611Medium 5.5G_variant_byteswap() can take a long time with some non-normal inputs
Assigned by redhat
Sep 14, 2023
CVE-2023-29499Medium 5.5Gvariant offset table entry size is not checked in is_normal()
Assigned by redhat
Sep 14, 2023
CVE-2023-32665Medium 5.5Gvariant deserialisation does not match spec for non-normal data
Assigned by redhat
Sep 14, 2023
CVE-2023-4813Medium 5.9Glibc: potential use-after-free in gaih_inet()
Assigned by redhat
Sep 12, 2023
CVE-2023-4459Medium 5.5Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()
Assigned by redhat
Aug 21, 2023
CVE-2023-4273Medium 6.0Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry
Assigned by redhat
Aug 9, 2023
CVE-2023-4004High 7.8Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
Assigned by redhat
Jul 31, 2023
CVE-2023-3773Medium 5.5Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr
Assigned by redhat
Jul 25, 2023
CVE-2023-3772Medium 5.5Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()
Assigned by redhat
Jul 25, 2023
CVE-2023-3338Medium 6.5Crash due to a null pointer dereference in the dn_nsp_send function
Assigned by redhat
Jun 30, 2023
CVE-2023-1206Medium 5.7A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack.
Assigned by redhat
Jun 30, 2023
CVE-2023-3212Medium 4.4A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel.
Assigned by redhat
Jun 23, 2023
CVE-2023-32373
Known exploited
High 8.8A use-after-free issue was addressed with improved memory management.
Assigned by apple
Jun 23, 2023
CVE-2023-2953High 7.5A vulnerability was found in openldap.
Assigned by redhat
May 30, 2023
CVE-2023-32233High 7.8In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory.
Assigned by mitre
May 8, 2023
CVE-2023-1652High 7.1A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel.
Assigned by redhat
Mar 29, 2023
CVE-2019-8720
Known exploited
High 8.8A vulnerability was found in WebKit.
Assigned by redhat
Mar 6, 2023
CVE-2023-1095Medium 5.5In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object.
Assigned by redhat
Feb 28, 2023
CVE-2023-0361High 7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.
Assigned by redhat
Feb 15, 2023
CVE-2022-3715High 7.8A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform.
Assigned by redhat
Jan 5, 2023
CVE-2022-3821Medium 5.5An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c.
Assigned by redhat
Nov 8, 2022
CVE-2022-2905Medium 5.5An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map.
Assigned by redhat
Sep 9, 2022
CVE-2020-10735Medium 6.2A flaw was found in python.
Assigned by redhat
Sep 9, 2022
CVE-2022-2153Medium 5.5A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ.
Assigned by redhat
Aug 31, 2022
CVE-2022-1184Medium 5.5A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component.
Assigned by redhat
Aug 29, 2022
CVE-2022-0171Medium 5.5A flaw was found in the Linux kernel.
Assigned by redhat
Aug 26, 2022
CVE-2021-4209Medium 6.5A NULL pointer dereference flaw was found in GnuTLS.
Assigned by redhat
Aug 24, 2022
CVE-2021-4189Medium 5.3A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode.
Assigned by redhat
Aug 24, 2022
CVE-2021-4037Medium 4.4Kernel: security regression for cve-2018-13405
Assigned by redhat
Aug 24, 2022
CVE-2021-3997Medium 5.5A flaw was found in systemd.
Assigned by redhat
Aug 23, 2022
CVE-2022-2509High 7.5A vulnerability found in gnutls.
Assigned by redhat
Aug 1, 2022
CVE-2022-1852Medium 5.5A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c.
Assigned by redhat
Jun 30, 2022
CVE-2022-2078Medium 5.5A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of s…
Assigned by redhat
Jun 30, 2022
CVE-2022-0987Low 3.3A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files.
Assigned by redhat
Jun 28, 2022
CVE-2022-1665High 8.2A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even though it shouldn't.
Assigned by redhat
Jun 21, 2022
CVE-2022-1462Medium 6.3An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem.
Assigned by redhat
May 31, 2022
CVE-2022-1304High 7.8An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5.
Assigned by redhat
Apr 14, 2022
CVE-2020-35501Low 3.4A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly not be logged by the audit subsystemMar 30, 2022
CVE-2022-0847
Known exploited
High 7.8A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus…
Assigned by redhat
Mar 7, 2022
CVE-2021-3733Medium 6.5There's a flaw in urllib's AbstractBasicAuthHandler class.
Assigned by redhat
Mar 7, 2022
CVE-2021-3737High 7.5A flaw was found in python.
Assigned by redhat
Mar 4, 2022
CVE-2022-0492
Known exploited
High 7.8A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function.
Assigned by redhat
Mar 3, 2022
CVE-2021-20320Medium 5.5A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel.
Assigned by redhat
Feb 18, 2022
CVE-2022-0529Medium 5.5A flaw was found in Unzip.
Assigned by redhat
Feb 9, 2022
CVE-2022-0530Medium 5.5A flaw was found in Unzip.
Assigned by redhat
Feb 9, 2022
CVE-2021-4034
Known exploited
High 7.8A local privilege escalation vulnerability was found on polkit's pkexec utility.
Assigned by redhat
Jan 28, 2022
CVE-2021-4166High 7.1Out-of-bounds Read in vim/vim
Assigned by @huntrdev
Dec 25, 2021
CVE-2021-4104
Healthcare
High 7.5Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2
Assigned by apache
Dec 14, 2021
CVE-2021-40438
Known exploited
Critical 9.0mod_proxy SSRF
Assigned by apache
Sep 16, 2021
CVE-2021-3655Low 3.3A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1.
Assigned by redhat
Aug 5, 2021
PreviousPage 16 of 17Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.