Enterprise Linux for Ibm Z Systems Eus S390x vulnerabilitiesAnd the versions its exploited flaws hit.
Enterprise Linux for Ibm Z Systems Eus S390x is made by Red Hat. We track 7 published vulnerabilities in it, across 4 versions. 2 of them are on the list of flaws known to be exploited, the newest added on 21 November 2023. If you run Enterprise Linux for Ibm Z Systems Eus S390x, check your version against the exploited flaws below and patch those first.
The most recent Enterprise Linux for Ibm Z Systems Eus S390x flaw added to the known-exploited list is CVE-2023-4911, on 21 November 2023. We keep watching the known-exploited list.
Which versions of Enterprise Linux for Ibm Z Systems Eus S390x do the exploited flaws hit?
Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.
- CVE-2023-4911Exploited list, 21 Nov 2023
GNU C Library Buffer Overflow Vulnerability
8.6 - CVE-2021-40438Exploited list, 1 Dec 2021
Apache HTTP Server-Side Request Forgery (SSRF)
8.2
Which Enterprise Linux for Ibm Z Systems Eus S390x vulnerabilities are being exploited?
2 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.8GNU C Library Buffer Overflow Vulnerability
GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.
- 9.0Apache HTTP Server-Side Request Forgery (SSRF)
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.
Which Enterprise Linux for Ibm Z Systems Eus S390x flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.
- 64%
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable.
- 2.2%CVE-2023-4813Medium
A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash.
- 1.7%CVE-2023-4527Medium
A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes...
- 1.6%CVE-2023-4806Medium
A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash.
- 0.5%CVE-2019-15718Medium
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for...
- 0.4%CVE-2021-3609High
.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges.
Running Enterprise Linux for Ibm Z Systems Eus S390x? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.
- Matched to
- Enterprise Linux for Ibm Z Systems Eus S390x on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 7 published vulnerabilities listed under the name Enterprise Linux for Ibm Z Systems Eus S390x, across 4 versions. The most recent Enterprise Linux for Ibm Z Systems Eus S390x flaw added to the known-exploited list is CVE-2023-4911, on 21 November 2023.
2 are on the list of flaws known to be exploited. The most recently added are CVE-2023-4911 and CVE-2021-40438.
Each flaw names its own versions, usually as ranges. The newest, CVE-2023-4911, affects 8.6. The versions for every exploited flaw are listed on this page.
Create a EdgeProtect account and track Enterprise Linux for Ibm Z Systems Eus S390x. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.