EL
Product
Enterprise Linux Eus
On CISA KEVExploited in the wildRansomware-linked
792
CVEs
43
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 74High 198Medium 228Low 0
Watch
Add Enterprise Linux Eus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-3180 | 5.6 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE) Affected: 7.6 |
| CVE-2017-3265 | 5.6 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2024-1062 | 5.5 | Feb 12 | 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) Affected: 8.6; 8.8; 9.2 |
| CVE-2023-6915 | 5.5 | Jan 15 | Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c Affected: 9.4; 9.4; 9.6; 9.6; 9.8; 9.8 |
| CVE-2021-3744 | 5.5 | Mar 4 | A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory… Affected: 8.6 |
| CVE-2014-0148 | 5.5 | Feb 11 | Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for… Affected: 6.5 |
| CVE-2015-1931 | 5.5 | Jan 23 | IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before… Affected: 6.7; 7.1; 7.2; 7.3; 7.4; 7.5 |
| CVE-2019-2819 | 5.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-11833 | 5.5 | May 15 | fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive… Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-11459 | 5.5 | Apr 22 | The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from… Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-16878 | 5.5 | Apr 18 | A flaw was found in pacemaker up to and including version 2.0.1 Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-7222 | 5.5 | Mar 17 | The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-6454 | 5.5 | Mar 17 | An issue was discovered in sd-bus in systemd 239 Affected: 7.4; 7.5; 8.1; 8.2; 8.4 |
| CVE-2019-7664 | 5.5 | Feb 9 | In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect overflow check Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-7665 | 5.5 | Feb 9 | In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf Affected: 8.1; 8.2; 8.4 |
| CVE-2019-7150 | 5.5 | Jan 29 | An issue was discovered in elfutils 0.175 Affected: 8.1; 8.2; 8.4 |
| CVE-2019-2436 | 5.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2015-5160 | 5.5 | Aug 20 | libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a… Affected: 7.3; 7.4; 7.5; 7.6 |
| CVE-2016-0651 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer Affected: 7.2; 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2012-0248 | 5.5 | Jun 5 | ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference… Affected: 6.2 |
| CVE-2019-2778 | 5.4 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2013-0375 | 5.4 | Jan 17 | Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and… Affected: 6.3 |
| CVE-2022-24806 | 5.3 | Apr 16 | net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously Affected: 9.2; 9.4 |
| CVE-2023-46846 | 5.3 | Nov 3 | Squid: request/response smuggling in http/1.1 and icap Affected: 8.6; 8.8; 9.0; 9.2 |
| CVE-2019-2769 | 5.3 | Jul 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities) Affected: 8.6 |
| CVE-2019-2762 | 5.3 | Jul 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities) Affected: 8.6 |
| CVE-2019-2623 | 5.3 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-20685 | 5.3 | Jan 10 | In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-3214 | 5.3 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound) Affected: 7.6 |
| CVE-2017-15705 | 5.3 | Sep 17 | A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2 Affected: 7.5 |
| CVE-2017-7829 | 5.3 | Jun 11 | It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient Affected: 7.4; 7.5 |
| CVE-2017-15906 | 5.3 | Oct 26 | The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files Affected: 7.6; 7.7 |
| CVE-2017-10357 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-10355 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-10350 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-10349 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-10348 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-10347 | 5.3 | Oct 19 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-10281 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2016-6794 | 5.3 | Aug 10 | When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-10109 | 5.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-10108 | 5.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-10053 | 5.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D) Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2015-8629 | 5.3 | Feb 13 | The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters… Affected: 6.7; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more |
| CVE-2019-2739 | 5.1 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2634 | 5.1 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2536 | 5.0 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2879 | 4.9 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2830 | 4.9 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2826 | 4.9 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles) Affected: 8.1; 8.2; 8.4; 8.6 |
The 500 most important CVEs for this product (exploited first, then by severity)