Redhat Enterprise Linux For Power Little Endian vulnerabilities, page 5

110 vulnerabilities

Known vulnerabilities in Redhat Enterprise Linux For Power Little Endian, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2026-42009Alpine Linuxalpine · gnutls +16 moreGnutls: gnutls: denial of service via dtls packet reordering vulnerabilityA flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.EPSS1.13%7.3HighCVE-2026-15370chainguard · libssh +21 moreLibssh: libssh: stack buffer overflow in sftp server longname constructionA flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.EPSS0.17%7HighCVE-2023-1476linux · linux_kernel +5 moreKpatch: mm/mremap.c: incomplete fix for cve-2022-41222A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system.EPSS0.23%6.5MediumCVE-2023-42669Alpine Linuxalpine · samba +10 moreSamba: "rpcecho" development server allows denial of service via sleep() call on ad dcA vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This vulnerability stems from an RPC function that can be blocked indefinitely. The issue arises because the "rpcecho" service operates with only one worker in the main RPC task, allowing calls to the "rpcecho" server to be blocked for a specified time, causing service disruptions. This disruption is triggered by a "sleep()" call in the "dcesrv_echo_TestSleep()" function under specific conditions. Authenticated users or attackers can exploit this vulnerability to make calls to the "rpcecho" server, requesting it to block for a specified duration, effectively disrupting most services and leading to a complete denial of service on the AD DC. The DoS affects all other services as "rpcecho" runs in the main RPC task.EPSS1.94%7.8HighCVE-2023-0494debian · xorg-server +81 moredebian xorg-serverA vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.EPSS0.90%7.8HighCVE-2023-0179canonical · ubuntu_linux +92 morecanonical ubuntu_linuxA buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.EPSS1.94%5.5MediumCVE-2023-4641debian · shadow +43 moreShadow-utils: possible password leak during passwd(1) changeA flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.EPSS0.26%5.9MediumCVE-2023-4813debian · glibc +268 moreGlibc: potential use-after-free in gaih_inet()A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.EPSS2.22%7.8HighCVE-2023-4911chainguard · glibc +276 moreGlibc: buffer overflow in ld.so leading to privilege escalationA buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.KEVEPSS63.77%6.5MediumCVE-2023-4527chainguard · glibc +29 moreGlibc: stack read overflow in getaddrinfo in no-aaaa modeA flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.EPSS1.67%5.9MediumCVE-2023-4806debian · glibc +24 moreGlibc: potential use-after-free in getaddrinfo()A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.EPSS1.61%5.5MediumCVE-2023-4042artifex · ghostscript +8 moreGhostscript: incomplete fix for cve-2020-16305A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.EPSS0.34%4.7MediumCVE-2023-4732debian · linux +63 moreKernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.hA flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmd_t x.EPSS0.18%5.3MediumCVE-2023-7250debian · iperf3 +6 moreIperf3: possible denial of serviceA flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection gets closed. This will prevent other connections to the server, leading to a denial of service.EPSS0.93%9.3CriticalCVE-2023-46846Alpine Linuxalpine · squid +15 moreSquid: request/response smuggling in http/1.1 and icapSQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.EPSS6.60%8.6HighCVE-2023-46847Alpine Linuxalpine · squid +19 moreSquid: denial of service in http digest authenticationSquid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.EPSS78.55%6.5MediumCVE-2023-38201fedoraproject · fedora +13 moreKeylime: challenge-response protocol bypass during agent registrationA flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration. This issue may allow an attacker to impersonate an agent and hide the true status of a monitored machine if the fake agent is added to the verifier list by a legitimate user, resulting in a breach of the integrity of the registrar database.EPSS0.49%7.5HighCVE-2023-38200fedoraproject · fedora +13 moreKeylime: registrar is subject to a dos against ssl connectionsA flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker to exhaust all available connections.EPSS1.45%4.4MediumCVE-2023-5870Alpine Linuxalpine · postgresql14 +34 morePostgresql: role pg_signal_backend can signal certain superuser processes.A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would affect that specific background worker only. This issue may allow a remote high privileged user to launch a denial of service (DoS) attack.EPSS2.56%7.8HighCVE-2023-5633debian · linux +92 moreKernel: vmwgfx: reference count issue leads to use-after-free in surface handlingThe reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration enabled, a local, unprivileged user could potentially use this flaw to escalate their privileges.EPSS0.28%