Redhat Mrg Realtime vulnerabilities
9 vulnerabilities
Known vulnerabilities in Redhat Mrg Realtime, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2019-9506bluetooth · br/edr +212 moreBlutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiationThe Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.CVSS8.1HighEPSS2.69%PrioritiseCVE-2018-16871red hat · kernel: +38 morered hat kernel:A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.CVSS7.5HighEPSS2.70%RoutineCVE-2017-18344canonical · ubuntu_linux +26 morecanonical ubuntu_linuxThe timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE).CVSS5.5MediumEPSS3.44%PrioritiseCVE-2018-13405canonical · ubuntu_linux +71 morecanonical ubuntu_linuxThe inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID.CVSS7.8HighEPSS1.04%RoutineCVE-2018-3639intel corporation · multiple +558 moreintel corporation multipleSystems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.CVSS5.5MediumEPSS60.42%PrioritiseCVE-2017-18017arista · eos +46 morearista eosThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.CVSS10.0CriticalEPSS52.84%RoutineCVE-2014-7283linux · linux_kernel +3 morelinux linux_kernelThe xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of service (filesystem corruption, and OOPS or panic) via operations on directories that have hash collisions, as demonstrated by rmdir operations.CVSS4.9MediumEPSS0.55%PrioritiseCVE-2009-3547canonical · ubuntu_linux +25 morecanonical ubuntu_linuxMultiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.CVSS7.0HighEPSS4.89%RoutineCVE-2009-3620canonical · ubuntu_linux +7 morecanonical ubuntu_linuxThe ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly gain privileges via unspecified ioctl calls.CVSS7.8HighEPSS0.43%