Enterprise Linux

enterprise_linux

Vendor: Redhat • 1,952 CVEs

CVEs (1,952)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-20236 3Fedoraproject RedhatZeromq 4Ceph Storage Enterprise LinuxFedora+1 more Jun 17, 2026 May 28, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. Th...Show more A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.Show less
CVE-2021-20201 2Redhat Spice Project 2Enterprise Linux Spice Jun 17, 2026 May 28, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.
CVE-2020-25710 4Debian FedoraprojectOpenldap+1 more 7Debian Linux Enterprise LinuxFedora+4 more Oct 14, 2026 May 28, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulner...Show more A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.Show less
CVE-2020-1702 2Containers Image Project Redhat 2Containers Image Enterprise Linux Jun 17, 2026 May 27, 2021 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use thi...Show more A malicious container image can consume an unbounded amount of memory when being pulled to a container runtime host, such as Red Hat Enterprise Linux using podman, or OpenShift Container Platform. An attacker can use this flaw to trick a user, with privileges to pull container images, into crashing the process responsible for pulling the image. This flaw affects containers-image versions before 5.2.0.Show less
CVE-2020-14301 2Netapp Redhat 13Codeready Linux Builder Enterprise LinuxEnterprise Linux Eus+10 more Jun 17, 2026 May 27, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows an attacker to acces...Show more An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows an attacker to access potentially sensitive information in the domain configuration via the `dumpxml` command.Show less
CVE-2021-30501 3Fedoraproject RedhatUpx 3Enterprise Linux FedoraUpx Jun 17, 2026 May 27, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file.
CVE-2021-30500 3Fedoraproject RedhatUpx 3Enterprise Linux FedoraUpx Jun 17, 2026 May 27, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file.
CVE-2021-3527 3Debian QemuRedhat 3Debian Linux Enterprise LinuxQemu Jun 17, 2026 May 26, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk trans...Show more A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array (VLA) on the stack without proper validation. Since the total size is not bounded, a malicious guest could use this flaw to influence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denial of service.Show less
CVE-2021-30471 3Fedoraproject Podofo ProjectRedhat 3Enterprise Linux FedoraPodofo Jun 17, 2026 May 26, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary function in src/podofo/doc/PdfNamesTree.cpp can lead to a stack overflow.
CVE-2021-30470 3Fedoraproject Podofo ProjectRedhat 3Enterprise Linux FedoraPodofo Jun 17, 2026 May 26, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray(), PdfTokenizer::GetNextVariant() and PdfTokenizer::ReadDataType() functions can lead to a stack overflow.
CVE-2021-30469 3Fedoraproject Podofo ProjectRedhat 3Enterprise Linux FedoraPodofo Jun 17, 2026 May 26, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear() function can cause a denial of service via a crafted PDF file.
CVE-2021-20297 3Fedoraproject GnomeRedhat 4Enterprise Linux FedoraNetworkmanager+1 more Jun 17, 2026 May 26, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A flaw was found in NetworkManager in versions before 1.30.0. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability.
CVE-2020-36332 4Debian NetappRedhat+1 more 4Debian Linux Enterprise LinuxLibwebp+1 more Jun 17, 2026 May 21, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.
CVE-2020-36331 5Apple DebianNetapp+2 more 6Debian Linux Enterprise LinuxIpados+3 more Jun 17, 2026 May 21, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.
CVE-2020-36330 5Apple DebianNetapp+2 more 6Debian Linux Enterprise LinuxIpados+3 more Jun 17, 2026 May 21, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availabilit...Show more A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.Show less
CVE-2020-36329 5Apple DebianNetapp+2 more 6Debian Linux Enterprise LinuxIpados+3 more Jun 17, 2026 May 21, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as syst...Show more A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.Show less
CVE-2020-36328 5Apple DebianNetapp+2 more 6Debian Linux Enterprise LinuxIpados+3 more Jun 17, 2026 May 21, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data...Show more A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.Show less
CVE-2018-25014 2Redhat Webmproject 2Enterprise Linux Libwebp Nov 21, 2024 May 21, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
CVE-2018-25013 2Redhat Webmproject 2Enterprise Linux Libwebp Nov 21, 2024 May 21, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
CVE-2018-25012 2Redhat Webmproject 2Enterprise Linux Libwebp Nov 21, 2024 May 21, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

Previous 1...394041...98 Next