Redhat Enterprise Linux For Power Little Endian Eus vulnerabilities, page 4
97 vulnerabilities
Known vulnerabilities in Redhat Enterprise Linux For Power Little Endian Eus, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2024-3049clusterlabs · booth +25 moreBooth: specially crafted hash can lead to invalid hmac being accepted by booth serverA flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.EPSS0.53%HighCVE-2019-19906apache · bookkeeper +107 moreapache bookkeepercyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.EPSS8.04%CriticalCVE-2019-11043canonical · ubuntu_linux +179 moreUnderflow in PHP-FPM can lead to RCEIn PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.KEVRansomwareEPSS99.75%HighCVE-2019-0211apache · apache_http_server +30 moreapache apache_http_serverIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.KEVEPSS65.00%CriticalCVE-2019-5544ubuntu · openslp-dfsg +21 moreubuntu openslp-dfsgOpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.KEVRansomwareEPSS98.13%MediumCVE-2019-15718debian · systemd +31 moredebian systemdIn systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.EPSS0.51%HighCVE-2019-6470Alpine Linuxalpine · dhcp +51 moredhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND librariesThere had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised to consult their vendor documentation.EPSS8.81%MediumCVE-2019-6454canonical · ubuntu_linux +66 morecanonical ubuntu_linuxAn issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).EPSS2.04%HighCVE-2019-8720debian · webkit2gtk +27 moredebian webkit2gtkA vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.KEVEPSS1.56%MediumCVE-2026-59842chainguard · libssh +18 moreLibssh: libssh: information disclosure via short gssapi curve25519 public keyA flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.EPSS0.49%HighCVE-2026-59849chainguard · libssh +18 moreLibssh: libssh: denial of service via automatic certificate authentication loopA flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service.EPSS0.44%CriticalCVE-2026-1709keylime +21 moreKeylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authenticationA flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate.EPSS5.79%HighCVE-2026-42009Alpine Linuxalpine · gnutls +16 moreGnutls: gnutls: denial of service via dtls packet reordering vulnerabilityA flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.EPSS1.13%HighCVE-2026-15370chainguard · libssh +21 moreLibssh: libssh: stack buffer overflow in sftp server longname constructionA flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead to crashes or possible code execution on the server.EPSS0.17%HighCVE-2023-1476linux · linux_kernel +5 moreKpatch: mm/mremap.c: incomplete fix for cve-2022-41222A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system.EPSS0.23%MediumCVE-2023-42669Alpine Linuxalpine · samba +10 moreSamba: "rpcecho" development server allows denial of service via sleep() call on ad dcA vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This vulnerability stems from an RPC function that can be blocked indefinitely. The issue arises because the "rpcecho" service operates with only one worker in the main RPC task, allowing calls to the "rpcecho" server to be blocked for a specified time, causing service disruptions. This disruption is triggered by a "sleep()" call in the "dcesrv_echo_TestSleep()" function under specific conditions. Authenticated users or attackers can exploit this vulnerability to make calls to the "rpcecho" server, requesting it to block for a specified duration, effectively disrupting most services and leading to a complete denial of service on the AD DC. The DoS affects all other services as "rpcecho" runs in the main RPC task.EPSS1.94%HighCVE-2023-0494debian · xorg-server +81 moredebian xorg-serverA vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.EPSS0.90%HighCVE-2023-0179canonical · ubuntu_linux +92 morecanonical ubuntu_linuxA buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.EPSS1.94%MediumCVE-2023-4813debian · glibc +268 moreGlibc: potential use-after-free in gaih_inet()A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.EPSS2.22%HighCVE-2023-4911chainguard · glibc +276 moreGlibc: buffer overflow in ld.so leading to privilege escalationA buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.KEVEPSS63.77%