Redhat Enterprise Linux Hpc Node vulnerabilities, page 4

146 vulnerabilities

Known vulnerabilities in Redhat Enterprise Linux Hpc Node, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.9MediumCVE-2016-2107Alpine Linuxalpine · openssl +17 morealpine opensslThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.EPSS89.06%7.8HighCVE-2016-2109Alpine Linuxalpine · openssl +10 morealpine opensslThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.EPSS29.21%7.5HighCVE-2016-2106Alpine Linuxalpine · openssl +10 morealpine opensslInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.EPSS27.26%7.5HighCVE-2016-2105Alpine Linuxalpine · openssl +17 morealpine opensslInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.EPSS39.65%7.2HighCVE-2016-0546canonical · ubuntu_linux +20 morecanonical ubuntu_linuxUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Client. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that these are multiple buffer overflows in the mysqlshow tool that allow remote database servers to have unspecified impact via a long table or database name.EPSS0.59%4MediumCVE-2016-0616canonical · ubuntu_linux +17 morecanonical ubuntu_linuxUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.EPSS4.28%7.8HighCVE-2016-0741debian · 389-ds-base +12 moredebian 389-ds-baseslapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of service (infinite loop and connection blocking) by leveraging an abnormally closed connection.EPSS3.96%7.8HighCVE-2016-0758canonical · ubuntu_linux +37 morecanonical ubuntu_linuxInteger overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data.EPSS0.40%3.5LowCVE-2016-0600canonical · ubuntu_linux +20 morecanonical ubuntu_linuxUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.EPSS3.94%3.5LowCVE-2016-0598canonical · ubuntu_linux +20 morecanonical ubuntu_linuxUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.EPSS3.94%4MediumCVE-2016-0597canonical · ubuntu_linux +20 morecanonical ubuntu_linuxUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.EPSS4.30%1.7LowCVE-2016-0609canonical · ubuntu_linux +20 morecanonical ubuntu_linuxUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to privileges.EPSS4.42%3.5LowCVE-2016-0608canonical · ubuntu_linux +20 morecanonical ubuntu_linuxUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to UDF.EPSS3.94%6.8MediumCVE-2016-0505canonical · ubuntu_linux +20 morecanonical ubuntu_linuxUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Options.EPSS7.51%3.5LowCVE-2016-0606canonical · ubuntu_linux +20 morecanonical ubuntu_linuxUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrity via unknown vectors related to encryption.EPSS4.23%5.9MediumCVE-2016-0695chainguard · openjdk-11-openj9-default-policy +30 morechainguard openjdk-11-openj9-default-policyUnspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.EPSS3.40%9.3CriticalCVE-2016-0636chainguard · openjdk-11-openj9-default-policy +70 morechainguard openjdk-11-openj9-default-policyUnspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Hotspot sub-component.EPSS5.76%4MediumCVE-2016-0596canonical · ubuntu_linux +20 morecanonical ubuntu_linuxUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.EPSS4.30%9.8CriticalCVE-2016-9634Alpine Linuxalpine · gst-plugins-good +10 morealpine gst-plugins-goodHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter.EPSS8.84%9.8CriticalCVE-2016-9635Alpine Linuxalpine · gst-plugins-good +10 morealpine gst-plugins-goodHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.EPSS8.84%