Redhat Enterprise Linux Hpc Node vulnerabilities, page 5
146 vulnerabilities
Known vulnerabilities in Redhat Enterprise Linux Hpc Node, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2016-9636Alpine Linuxalpine · gst-plugins-good +10 morealpine gst-plugins-goodHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'write count' that goes beyond the initialized buffer.EPSS8.33%MediumCVE-2016-4470debian · linux +45 moredebian linuxThe key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.EPSS0.58%HighCVE-2016-4300Alpine Linuxalpine · libarchive +10 morealpine libarchiveInteger overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow.EPSS4.92%HighCVE-2016-4444redhat · enterprise_linux_desktop +4 moreredhat enterprise_linux_desktopThe allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function.EPSS0.47%HighCVE-2016-4445redhat · enterprise_linux_desktop +7 moreredhat enterprise_linux_desktopThe fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name, related to executing external commands with the commands.getstatusoutput function.EPSS0.47%HighCVE-2016-4446redhat · enterprise_linux_desktop +4 moreredhat enterprise_linux_desktopThe allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput function.EPSS0.47%HighCVE-2016-4302Alpine Linuxalpine · libarchive +10 morealpine libarchiveHeap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary.EPSS4.76%HighCVE-2016-4992debian · 389-ds-base +6 moredebian 389-ds-base389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to infer the existence of RDN component objects.EPSS2.41%LowCVE-2016-4455redhat · enterprise_linux_desktop +16 moreredhat enterprise_linux_desktopThe Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain sensitive information by reading files in the directories.EPSS0.43%HighCVE-2016-4989redhat · enterprise_linux_desktop +4 moreredhat enterprise_linux_desktopsetroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by the _set_tpath function in audit_data.py or via a crafted (2) local_id or (3) analysis_id field in a crafted XML document to the run_fix function in SetroubleshootFixit.py, related to the subprocess.check_output and commands.getstatusoutput functions, a different vulnerability than CVE-2016-4445.EPSS0.46%HighCVE-2016-4809Alpine Linuxalpine · libarchive +11 morealpine libarchiveThe archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.EPSS4.77%CriticalCVE-2016-7050ubuntu · resteasy +18 moreubuntu resteasySerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to execute arbitrary code.EPSS5.31%HighCVE-2016-7545debian · policycoreutils +22 moredebian policycoreutilsSELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.EPSS0.38%MediumCVE-2016-7091redhat · enterprise_linux_desktop +6 moreredhat enterprise_linux_desktopsudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files with elevated privileges provided by sudo.EPSS0.40%MediumCVE-2016-7166debian · libarchive +10 moredebian libarchivelibarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip file.EPSS1.64%MediumCVE-2016-7796debian · systemd +27 moredebian systemdThe manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.EPSS0.85%HighCVE-2016-5416debian · 389-ds-base +5 moredebian 389-ds-base389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to read the default Access Control Instructions.EPSS3.23%MediumCVE-2016-5410debian · firewalld +12 moredebian firewalldfirewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.EPSS0.36%CriticalCVE-2016-5405debian · 389-ds-base +4 moredebian 389-ds-base389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux HPC Node 6 through 7, Red Hat Enterprise Linux Server 6 through 7, and Red Hat Enterprise Linux Workstation 6 through 7 allows remote attackers to obtain user passwords.EPSS3.06%HighCVE-2016-5388apache · tomcat +17 moreapache tomcatApache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "A mitigation is planned for future releases of Tomcat, tracked as CVE-2016-5388"; in other words, this is not a CVE ID for a vulnerability.EPSS50.90%