[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEB6ESsAdELdAwRUtG-164g5EuG87UnmJwr3BmAe-QJU":3,"g5a-family:redhat\u002Fenterprise_linux":476,"g5a-ex:redhat\u002Fenterprise_linux@*":513},{"success":4,"data":5},true,{"product":6,"versions":155,"topVulnerabilitiesByEpss":213,"kevVulnerabilities":275,"seoMetadata":455,"meta":474},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":154},"redhat","enterprise_linux",57,2039,23,"2026-03-27",[14,19,22,25,28,31,34,38,40,42,44,47,51,53,55,57,59,61,65,67,69,71,73,76,79,81,84,86,88,92,94,97,100,103,106,108,110,112,114,117,119,121,123,125,127,129,131,134,136,138,140,142,144,146,148,150,152],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.0",1,0,false,{"version":20,"cve_count":21,"kev_count":16,"has_kev":4},"10.0",25,{"version":23,"cve_count":24,"kev_count":17,"has_kev":18},"2.1",83,{"version":26,"cve_count":27,"kev_count":17,"has_kev":18},"3",7,{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},"3.0",99,{"version":32,"cve_count":33,"kev_count":16,"has_kev":4},"4",11,{"version":35,"cve_count":36,"kev_count":37,"has_kev":4},"4.0",84,2,{"version":39,"cve_count":37,"kev_count":17,"has_kev":18},"4.4",{"version":41,"cve_count":16,"kev_count":17,"has_kev":18},"4.5",{"version":43,"cve_count":37,"kev_count":17,"has_kev":18},"4.5.z",{"version":45,"cve_count":46,"kev_count":37,"has_kev":4},"5",91,{"version":48,"cve_count":49,"kev_count":50,"has_kev":4},"5.0",189,5,{"version":52,"cve_count":16,"kev_count":17,"has_kev":18},"5.1.0",{"version":54,"cve_count":16,"kev_count":17,"has_kev":18},"5.11",{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},"5.4",{"version":58,"cve_count":16,"kev_count":17,"has_kev":18},"5_server",{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},"6",{"version":62,"cve_count":63,"kev_count":64,"has_kev":4},"6.0",659,10,{"version":66,"cve_count":37,"kev_count":16,"has_kev":4},"6.1",{"version":68,"cve_count":16,"kev_count":17,"has_kev":18},"6.10",{"version":70,"cve_count":37,"kev_count":16,"has_kev":4},"6.2",{"version":72,"cve_count":37,"kev_count":16,"has_kev":4},"6.3",{"version":74,"cve_count":75,"kev_count":16,"has_kev":4},"6.4",4,{"version":77,"cve_count":78,"kev_count":16,"has_kev":4},"6.5",3,{"version":80,"cve_count":78,"kev_count":16,"has_kev":4},"6.6",{"version":82,"cve_count":83,"kev_count":16,"has_kev":4},"6.7",8,{"version":85,"cve_count":37,"kev_count":16,"has_kev":4},"6.8",{"version":87,"cve_count":75,"kev_count":16,"has_kev":4},"6.9",{"version":89,"cve_count":90,"kev_count":91,"has_kev":4},"7.0",860,9,{"version":93,"cve_count":78,"kev_count":16,"has_kev":4},"7.1",{"version":95,"cve_count":96,"kev_count":16,"has_kev":4},"7.2",6,{"version":98,"cve_count":99,"kev_count":16,"has_kev":4},"7.3",12,{"version":101,"cve_count":102,"kev_count":17,"has_kev":18},"7.4",31,{"version":104,"cve_count":105,"kev_count":17,"has_kev":18},"7.5",35,{"version":107,"cve_count":102,"kev_count":17,"has_kev":18},"7.6",{"version":109,"cve_count":96,"kev_count":17,"has_kev":18},"7.7",{"version":111,"cve_count":17,"kev_count":17,"has_kev":18},"7.8",{"version":113,"cve_count":17,"kev_count":17,"has_kev":18},"7.9",{"version":115,"cve_count":116,"kev_count":33,"has_kev":4},"8.0",966,{"version":118,"cve_count":75,"kev_count":17,"has_kev":18},"8.1",{"version":120,"cve_count":37,"kev_count":17,"has_kev":18},"8.3",{"version":122,"cve_count":16,"kev_count":17,"has_kev":18},"8.3.0",{"version":124,"cve_count":75,"kev_count":17,"has_kev":18},"8.4",{"version":126,"cve_count":16,"kev_count":17,"has_kev":18},"8.5.0",{"version":128,"cve_count":37,"kev_count":17,"has_kev":18},"8.6",{"version":130,"cve_count":16,"kev_count":17,"has_kev":18},"8.7",{"version":132,"cve_count":133,"kev_count":75,"has_kev":4},"9.0",391,{"version":135,"cve_count":16,"kev_count":17,"has_kev":18},"9.1",{"version":137,"cve_count":16,"kev_count":17,"has_kev":18},"as_2.1",{"version":139,"cve_count":96,"kev_count":17,"has_kev":18},"as_3",{"version":141,"cve_count":83,"kev_count":17,"has_kev":18},"as_4",{"version":143,"cve_count":16,"kev_count":17,"has_kev":18},"es_2.1",{"version":145,"cve_count":96,"kev_count":17,"has_kev":18},"es_3",{"version":147,"cve_count":96,"kev_count":17,"has_kev":18},"es_4",{"version":149,"cve_count":16,"kev_count":17,"has_kev":18},"ws_2.1",{"version":151,"cve_count":50,"kev_count":17,"has_kev":18},"ws_3",{"version":153,"cve_count":96,"kev_count":17,"has_kev":18},"ws_4","Enterprise Linux by Redhat is a technology product with 57 tracked versions and 2039 known security vulnerabilities including 23 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":16,"has_kev":4},{"version":23,"cve_count":24,"kev_count":17,"has_kev":18},{"version":26,"cve_count":27,"kev_count":17,"has_kev":18},{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},{"version":32,"cve_count":33,"kev_count":16,"has_kev":4},{"version":35,"cve_count":36,"kev_count":37,"has_kev":4},{"version":39,"cve_count":37,"kev_count":17,"has_kev":18},{"version":41,"cve_count":16,"kev_count":17,"has_kev":18},{"version":43,"cve_count":37,"kev_count":17,"has_kev":18},{"version":45,"cve_count":46,"kev_count":37,"has_kev":4},{"version":48,"cve_count":49,"kev_count":50,"has_kev":4},{"version":52,"cve_count":16,"kev_count":17,"has_kev":18},{"version":54,"cve_count":16,"kev_count":17,"has_kev":18},{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},{"version":58,"cve_count":16,"kev_count":17,"has_kev":18},{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},{"version":62,"cve_count":63,"kev_count":64,"has_kev":4},{"version":66,"cve_count":37,"kev_count":16,"has_kev":4},{"version":68,"cve_count":16,"kev_count":17,"has_kev":18},{"version":70,"cve_count":37,"kev_count":16,"has_kev":4},{"version":72,"cve_count":37,"kev_count":16,"has_kev":4},{"version":74,"cve_count":75,"kev_count":16,"has_kev":4},{"version":77,"cve_count":78,"kev_count":16,"has_kev":4},{"version":80,"cve_count":78,"kev_count":16,"has_kev":4},{"version":82,"cve_count":83,"kev_count":16,"has_kev":4},{"version":85,"cve_count":37,"kev_count":16,"has_kev":4},{"version":87,"cve_count":75,"kev_count":16,"has_kev":4},{"version":89,"cve_count":90,"kev_count":91,"has_kev":4},{"version":93,"cve_count":78,"kev_count":16,"has_kev":4},{"version":95,"cve_count":96,"kev_count":16,"has_kev":4},{"version":98,"cve_count":99,"kev_count":16,"has_kev":4},{"version":101,"cve_count":102,"kev_count":17,"has_kev":18},{"version":104,"cve_count":105,"kev_count":17,"has_kev":18},{"version":107,"cve_count":102,"kev_count":17,"has_kev":18},{"version":109,"cve_count":96,"kev_count":17,"has_kev":18},{"version":111,"cve_count":17,"kev_count":17,"has_kev":18},{"version":113,"cve_count":17,"kev_count":17,"has_kev":18},{"version":115,"cve_count":116,"kev_count":33,"has_kev":4},{"version":118,"cve_count":75,"kev_count":17,"has_kev":18},{"version":120,"cve_count":37,"kev_count":17,"has_kev":18},{"version":122,"cve_count":16,"kev_count":17,"has_kev":18},{"version":124,"cve_count":75,"kev_count":17,"has_kev":18},{"version":126,"cve_count":16,"kev_count":17,"has_kev":18},{"version":128,"cve_count":37,"kev_count":17,"has_kev":18},{"version":130,"cve_count":16,"kev_count":17,"has_kev":18},{"version":132,"cve_count":133,"kev_count":75,"has_kev":4},{"version":135,"cve_count":16,"kev_count":17,"has_kev":18},{"version":137,"cve_count":16,"kev_count":17,"has_kev":18},{"version":139,"cve_count":96,"kev_count":17,"has_kev":18},{"version":141,"cve_count":83,"kev_count":17,"has_kev":18},{"version":143,"cve_count":16,"kev_count":17,"has_kev":18},{"version":145,"cve_count":96,"kev_count":17,"has_kev":18},{"version":147,"cve_count":96,"kev_count":17,"has_kev":18},{"version":149,"cve_count":16,"kev_count":17,"has_kev":18},{"version":151,"cve_count":50,"kev_count":17,"has_kev":18},{"version":153,"cve_count":96,"kev_count":17,"has_kev":18},[214,222,228,233,238,245,251,257,262,268],{"cveId":215,"description":216,"publishedDate":217,"cvssScore":218,"cvssVersion":219,"severity":220,"isKev":4,"epssScore":221},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":223,"description":224,"publishedDate":225,"cvssScore":226,"cvssVersion":219,"severity":227,"isKev":18,"epssScore":221},"CVE-2014-3566","The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue.","2014-10-15",3.4,"Low",{"cveId":229,"description":230,"publishedDate":231,"cvssScore":218,"cvssVersion":219,"severity":220,"isKev":4,"epssScore":232},"CVE-2013-2251","Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.","2013-07-20",0.99998,{"cveId":234,"description":235,"publishedDate":236,"cvssScore":218,"cvssVersion":219,"severity":220,"isKev":4,"epssScore":237},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":239,"description":240,"publishedDate":241,"cvssScore":242,"cvssVersion":219,"severity":243,"isKev":4,"epssScore":244},"CVE-2019-11043","In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.","2019-10-28",8.7,"High",0.99748,{"cveId":246,"description":247,"publishedDate":248,"cvssScore":249,"cvssVersion":219,"severity":243,"isKev":18,"epssScore":250},"CVE-2019-11477","Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.","2019-06-19",7.5,0.98745,{"cveId":252,"description":253,"publishedDate":254,"cvssScore":249,"cvssVersion":255,"severity":243,"isKev":18,"epssScore":256},"CVE-2018-1111","DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.","2018-05-17","v3.0",0.97862,{"cveId":258,"description":259,"publishedDate":260,"cvssScore":218,"cvssVersion":255,"severity":220,"isKev":18,"epssScore":261},"CVE-2018-17456","Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive \"git clone\" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.","2018-10-06",0.97356,{"cveId":263,"description":264,"publishedDate":265,"cvssScore":266,"cvssVersion":219,"severity":243,"isKev":18,"epssScore":267},"CVE-2014-0224","OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \"CCS Injection\" vulnerability.","2014-06-05",7.4,0.95326,{"cveId":269,"description":270,"publishedDate":271,"cvssScore":272,"cvssVersion":219,"severity":273,"isKev":18,"epssScore":274},"CVE-2008-1447","The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka \"DNS Insufficient Socket Entropy Vulnerability\" or \"the Kaminsky bug.\"","2008-07-08",6.8,"Medium",0.95182,[276,286,295,304,313,321,327,336,343,352,360,368,377,384,392,400,408,412,415,421,424,426,434,441,447],{"cveId":277,"description":278,"publishedDate":279,"cvssScore":280,"severity":243,"isKev":4,"epssScore":281,"cisaVulnName":282,"cisaDateAdded":283,"cisaShortDescription":284,"cisaRequiredAction":285},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.","2022-03-03",7.8,0.05528,"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":287,"description":288,"publishedDate":289,"cvssScore":280,"severity":243,"isKev":4,"epssScore":290,"cisaVulnName":291,"cisaDateAdded":292,"cisaShortDescription":293,"cisaRequiredAction":294},"CVE-2026-31431","In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings.  Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly.","2026-04-22",0.98114,"Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","2026-05-01","Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.","\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":296,"description":297,"publishedDate":298,"cvssScore":299,"severity":220,"isKev":4,"epssScore":300,"cisaVulnName":301,"cisaDateAdded":302,"cisaShortDescription":303,"cisaRequiredAction":285},"CVE-2025-32463","Sudo before 1.9.17p1 allows local users to obtain root access because \u002Fetc\u002Fnsswitch.conf from a user-controlled directory is used with the --chroot option.","2025-06-30",9.3,0.55498,"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","2025-09-29","Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.",{"cveId":305,"description":306,"publishedDate":307,"cvssScore":280,"severity":243,"isKev":4,"epssScore":308,"cisaVulnName":309,"cisaDateAdded":310,"cisaShortDescription":311,"cisaRequiredAction":312},"CVE-2017-1000253","Linux distributions that have not patched their long-term kernels with https:\u002F\u002Fgit.kernel.org\u002Flinus\u002Fa87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (backported to Linux 3.10.77 in May 2015), but it was not recognized as a security threat. With CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE enabled, and a normal top-down address allocation strategy, load_elf_binary() will attempt to map a PIE binary into an address range immediately below mm->mmap_base. Unfortunately, load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary which means that, while the first PT_LOAD segment is mapped below mm->mmap_base, the subsequent PT_LOAD segment(s) end up being mapped above mm->mmap_base into the are that is supposed to be the \"gap\" between the stack and the binary.","2017-10-05",0.10695,"Linux Kernel PIE Stack Buffer Corruption Vulnerability ","2024-09-09","Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges. ","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":314,"description":315,"publishedDate":316,"cvssScore":280,"severity":243,"isKev":4,"epssScore":317,"cisaVulnName":318,"cisaDateAdded":319,"cisaShortDescription":320,"cisaRequiredAction":312},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.63769,"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.",{"cveId":322,"description":323,"publishedDate":324,"cvssScore":249,"severity":243,"isKev":4,"epssScore":221,"cisaVulnName":325,"cisaDateAdded":324,"cisaShortDescription":326,"cisaRequiredAction":285},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10","HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).",{"cveId":328,"description":329,"publishedDate":330,"cvssScore":331,"severity":243,"isKev":4,"epssScore":332,"cisaVulnName":333,"cisaDateAdded":334,"cisaShortDescription":335,"cisaRequiredAction":312},"CVE-2023-5217","Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-09-28",8.8,0.49013,"Google Chromium libvpx Heap Buffer Overflow Vulnerability","2023-10-02","Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.",{"cveId":337,"description":338,"publishedDate":339,"cvssScore":218,"severity":220,"isKev":4,"epssScore":340,"cisaVulnName":341,"cisaDateAdded":330,"cisaShortDescription":342,"cisaRequiredAction":312},"CVE-2018-14667","The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.","2018-11-06",0.74202,"Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability","Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.",{"cveId":344,"description":345,"publishedDate":346,"cvssScore":249,"severity":243,"isKev":4,"epssScore":347,"cisaVulnName":348,"cisaDateAdded":349,"cisaShortDescription":350,"cisaRequiredAction":351},"CVE-2016-9079","A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox \u003C 50.0.2, Firefox ESR \u003C 45.5.1, and Thunderbird \u003C 45.5.1.","2018-06-11",0.87357,"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","2023-06-22","Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.","Apply updates per vendor instructions.",{"cveId":353,"description":354,"publishedDate":355,"cvssScore":331,"severity":243,"isKev":4,"epssScore":356,"cisaVulnName":357,"cisaDateAdded":358,"cisaShortDescription":359,"cisaRequiredAction":351},"CVE-2023-32373","A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2023-06-23",0.12172,"Apple Multiple Products WebKit Use-After-Free Vulnerability","2023-05-22","Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":361,"description":362,"publishedDate":363,"cvssScore":280,"severity":243,"isKev":4,"epssScore":364,"cisaVulnName":365,"cisaDateAdded":366,"cisaShortDescription":367,"cisaRequiredAction":351},"CVE-2021-3560","It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","2022-02-16",0.23708,"Red Hat Polkit Incorrect Authorization Vulnerability","2023-05-12","Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.",{"cveId":369,"description":370,"publishedDate":371,"cvssScore":372,"severity":273,"isKev":4,"epssScore":373,"cisaVulnName":374,"cisaDateAdded":366,"cisaShortDescription":375,"cisaRequiredAction":376},"CVE-2014-0196","The n_tty_write function in drivers\u002Ftty\u002Fn_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.","2014-05-07",5.5,0.20329,"Linux Kernel Race Condition Vulnerability","Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":378,"description":379,"publishedDate":380,"cvssScore":280,"severity":243,"isKev":4,"epssScore":381,"cisaVulnName":382,"cisaDateAdded":366,"cisaShortDescription":383,"cisaRequiredAction":376},"CVE-2010-3904","The rds_page_copy_user function in net\u002Frds\u002Fpage.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","2010-12-06",0.15861,"Linux Kernel Improper Input Validation Vulnerability","Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.",{"cveId":385,"description":386,"publishedDate":387,"cvssScore":280,"severity":243,"isKev":4,"epssScore":388,"cisaVulnName":389,"cisaDateAdded":390,"cisaShortDescription":391,"cisaRequiredAction":351},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","2022-01-28",0.94921,"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.",{"cveId":393,"description":394,"publishedDate":395,"cvssScore":331,"severity":243,"isKev":4,"epssScore":396,"cisaVulnName":397,"cisaDateAdded":398,"cisaShortDescription":399,"cisaRequiredAction":351},"CVE-2019-8720","A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.","2023-03-06",0.01556,"WebKitGTK Memory Corruption Vulnerability","2022-05-23","WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.",{"cveId":401,"description":402,"publishedDate":403,"cvssScore":280,"severity":243,"isKev":4,"epssScore":404,"cisaVulnName":405,"cisaDateAdded":406,"cisaShortDescription":407,"cisaRequiredAction":351},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",0.92795,"Linux Kernel Privilege Escalation Vulnerability","2022-04-25","Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"",{"cveId":229,"description":230,"publishedDate":231,"cvssScore":218,"severity":220,"isKev":4,"epssScore":232,"cisaVulnName":409,"cisaDateAdded":410,"cisaShortDescription":411,"cisaRequiredAction":351},"Apache Struts Improper Input Validation Vulnerability","2022-03-25","Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.",{"cveId":239,"description":240,"publishedDate":241,"cvssScore":242,"severity":243,"isKev":4,"epssScore":244,"cisaVulnName":413,"cisaDateAdded":410,"cisaShortDescription":414,"cisaRequiredAction":351},"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.",{"cveId":416,"description":417,"publishedDate":418,"cvssScore":27,"severity":243,"isKev":4,"epssScore":419,"cisaVulnName":374,"cisaDateAdded":279,"cisaShortDescription":420,"cisaRequiredAction":351},"CVE-2016-5195","Race condition in mm\u002Fgup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"","2016-11-10",0.83524,"Race condition in mm\u002Fgup.c in the Linux kernel allows local users to escalate privileges.",{"cveId":234,"description":235,"publishedDate":236,"cvssScore":218,"severity":220,"isKev":4,"epssScore":237,"cisaVulnName":422,"cisaDateAdded":387,"cisaShortDescription":423,"cisaRequiredAction":351},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"cveId":215,"description":216,"publishedDate":217,"cvssScore":218,"severity":220,"isKev":4,"epssScore":221,"cisaVulnName":422,"cisaDateAdded":387,"cisaShortDescription":425,"cisaRequiredAction":351},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",{"cveId":427,"description":428,"publishedDate":429,"cvssScore":280,"severity":243,"isKev":4,"epssScore":430,"cisaVulnName":431,"cisaDateAdded":432,"cisaShortDescription":433,"cisaRequiredAction":351},"CVE-2019-13272","In the Linux kernel before 5.1.17, ptrace_link in kernel\u002Fptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.","2019-07-17",0.52199,"Linux Kernel Improper Privilege Management Vulnerability","2021-12-10","Kernel\u002Fptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.",{"cveId":435,"description":436,"publishedDate":437,"cvssScore":331,"severity":243,"isKev":4,"epssScore":438,"cisaVulnName":439,"cisaDateAdded":432,"cisaShortDescription":440,"cisaRequiredAction":351},"CVE-2010-1871","JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL.  NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.","2010-08-05",0.83397,"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.",{"cveId":442,"description":443,"publishedDate":444,"cvssScore":91,"severity":220,"isKev":4,"epssScore":221,"cisaVulnName":445,"cisaDateAdded":446,"cisaShortDescription":443,"cisaRequiredAction":351},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16","Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"cveId":448,"description":449,"publishedDate":450,"cvssScore":280,"severity":243,"isKev":4,"epssScore":451,"cisaVulnName":452,"cisaDateAdded":453,"cisaShortDescription":454,"cisaRequiredAction":351},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",0.65005,"Apache HTTP Server Privilege Escalation Vulnerability","2021-11-03","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"title":456,"metaDescription":457,"keywords":458,"structuredData":459},"Enterprise Linux by Redhat - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Enterprise Linux by Redhat covering 57 versions with 2039 tracked vulnerabilities including 6 critical and 18 high-severity issues and 23 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Linux vulnerabilities, Enterprise Linux security, Enterprise Linux CVE, Redhat Enterprise Linux, Enterprise Linux threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Enterprise Linux KEV, Enterprise Linux exploited vulnerabilities",{"@context":460,"@type":461,"name":462,"description":457,"url":463,"manufacturer":464,"applicationCategory":468,"softwareVersion":469,"mainEntity":470},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Linux","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fenterprise_linux",{"@type":465,"name":466,"url":467},"Organization","Redhat","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fredhat","Security Software","57 versions tracked",{"@type":471,"name":472,"description":473,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Linux Security Vulnerabilities","Security vulnerabilities affecting Enterprise Linux by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":475,"apiVersion":29},"2026-10-28T13:53:06.550Z",[477,480,483,486,489,492,495,498,501,504,507,510],{"product":478,"cves":479},"enterprise_linux_desktop",1947,{"product":481,"cves":482},"enterprise_linux_server",1913,{"product":484,"cves":485},"enterprise_linux_workstation",1850,{"product":487,"cves":488},"enterprise_linux_server_aus",1055,{"product":490,"cves":491},"enterprise_linux_eus",783,{"product":493,"cves":494},"enterprise_linux_server_tus",765,{"product":496,"cves":497},"enterprise_linux_server_eus",625,{"product":499,"cves":500},"enterprise_linux_hpc_node",149,{"product":502,"cves":503},"enterprise_linux_for_ibm_z_systems",108,{"product":505,"cves":506},"enterprise_linux_for_power_little_endian",103,{"product":508,"cves":509},"enterprise_linux_for_power_little_endian_eus",89,{"product":511,"cves":512},"enterprise_linux_workstation_supplementary",86,{"rows":514,"total":21,"capped":18,"failed":17},[515,519,523,527,531,535,539,543,547,551,555,559,563,567,571,575,579,583,587,591,595,599,603,607,611],{"cveId":277,"name":282,"severity":243,"cvss":280,"added":283,"epss":281,"published":516,"ranges":517,"checked":4,"hits":518,"covers":18},"2022-03-03T19:15:08.633",[115],[],{"cveId":287,"name":291,"severity":243,"cvss":280,"added":292,"epss":290,"published":520,"ranges":521,"checked":4,"hits":522,"covers":18},"2026-04-22T09:16:21.27",[115,132,20],[],{"cveId":296,"name":301,"severity":220,"cvss":299,"added":302,"epss":300,"published":524,"ranges":525,"checked":4,"hits":526,"covers":18},"2025-06-30T21:15:30.257",[20],[],{"cveId":305,"name":309,"severity":243,"cvss":280,"added":310,"epss":308,"published":528,"ranges":529,"checked":4,"hits":530,"covers":18},"2017-10-05T01:29:04.79",[62,66,70,72,74,77,80,82,85,87,89,93,95,98],[],{"cveId":314,"name":318,"severity":243,"cvss":280,"added":319,"epss":317,"published":532,"ranges":533,"checked":4,"hits":534,"covers":18},"2023-10-03T18:15:10.463",[115,132],[],{"cveId":322,"name":325,"severity":243,"cvss":249,"added":324,"epss":221,"published":536,"ranges":537,"checked":4,"hits":538,"covers":18},"2023-10-10T14:15:10.883",[62,115,132],[],{"cveId":328,"name":333,"severity":243,"cvss":331,"added":334,"epss":332,"published":540,"ranges":541,"checked":4,"hits":542,"covers":18},"2023-09-28T16:15:10.98",[132],[],{"cveId":337,"name":341,"severity":220,"cvss":218,"added":330,"epss":340,"published":544,"ranges":545,"checked":4,"hits":546,"covers":18},"2018-11-06T22:29:00.193",[48,62],[],{"cveId":344,"name":348,"severity":243,"cvss":249,"added":349,"epss":347,"published":548,"ranges":549,"checked":4,"hits":550,"covers":18},"2018-06-11T21:29:01.797",[48,62,89],[],{"cveId":353,"name":357,"severity":243,"cvss":331,"added":358,"epss":356,"published":552,"ranges":553,"checked":4,"hits":554,"covers":18},"2023-06-23T18:15:12.007",[62,89,115,132],[],{"cveId":361,"name":365,"severity":243,"cvss":280,"added":366,"epss":364,"published":556,"ranges":557,"checked":4,"hits":558,"covers":18},"2022-02-16T19:15:08.45",[],[],{"cveId":369,"name":374,"severity":273,"cvss":372,"added":366,"epss":373,"published":560,"ranges":561,"checked":4,"hits":562,"covers":18},"2014-05-07T10:55:04.337",[62],[],{"cveId":378,"name":382,"severity":243,"cvss":280,"added":366,"epss":381,"published":564,"ranges":565,"checked":4,"hits":566,"covers":18},"2010-12-06T20:13:00.513",[48,62],[],{"cveId":385,"name":389,"severity":243,"cvss":280,"added":390,"epss":388,"published":568,"ranges":569,"checked":4,"hits":570,"covers":18},"2022-01-28T20:15:12.193",[115],[],{"cveId":393,"name":397,"severity":243,"cvss":331,"added":398,"epss":396,"published":572,"ranges":573,"checked":4,"hits":574,"covers":18},"2023-03-06T23:15:10.287",[115],[],{"cveId":401,"name":405,"severity":243,"cvss":280,"added":406,"epss":404,"published":576,"ranges":577,"checked":4,"hits":578,"covers":18},"2022-03-10T17:44:57.283",[115],[],{"cveId":229,"name":409,"severity":220,"cvss":218,"added":410,"epss":232,"published":580,"ranges":581,"checked":4,"hits":582,"covers":18},"2013-07-20T03:37:30.737",[],[],{"cveId":239,"name":413,"severity":243,"cvss":242,"added":410,"epss":244,"published":584,"ranges":585,"checked":4,"hits":586,"covers":18},"2019-10-28T15:15:13.863",[115],[],{"cveId":416,"name":374,"severity":243,"cvss":27,"added":279,"epss":419,"published":588,"ranges":589,"checked":4,"hits":590,"covers":18},"2016-11-10T21:59:00.197",[45,62,89],[],{"cveId":234,"name":422,"severity":220,"cvss":218,"added":387,"epss":237,"published":592,"ranges":593,"checked":4,"hits":594,"covers":18},"2014-09-25T01:55:04.367",[35,48,62,89],[],{"cveId":215,"name":422,"severity":220,"cvss":218,"added":387,"epss":221,"published":596,"ranges":597,"checked":4,"hits":598,"covers":18},"2014-09-24T18:48:04.477",[35,48,62,89],[],{"cveId":427,"name":431,"severity":243,"cvss":280,"added":432,"epss":430,"published":600,"ranges":601,"checked":4,"hits":602,"covers":18},"2019-07-17T13:15:10.687",[89,115],[],{"cveId":435,"name":439,"severity":243,"cvss":331,"added":432,"epss":438,"published":604,"ranges":605,"checked":4,"hits":606,"covers":18},"2010-08-05T13:23:09.477",[],[],{"cveId":442,"name":445,"severity":220,"cvss":91,"added":446,"epss":221,"published":608,"ranges":609,"checked":4,"hits":610,"covers":18},"2021-09-16T15:15:07.633",[115],[],{"cveId":448,"name":452,"severity":243,"cvss":280,"added":453,"epss":451,"published":612,"ranges":613,"checked":4,"hits":614,"covers":18},"2019-04-08T22:29:00.387",[115],[]]