EL
Product
Enterprise Linux For Arm 64
On CISA KEVExploited in the wildRansomware-linked
46
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 23Medium 20Low 0
Watch
Add Enterprise Linux For Arm 64 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-0193 | 6.7 | Jan 2 | Kernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation Affected: 9.4_aarch64; 9.6_aarch64; 9.0_aarch64 |
| CVE-2025-2784 | 6.5 | Apr 3 | Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content Affected: 8.0_aarch64; 9.0_aarch64; 10.0_aarch64 |
| CVE-2024-9676 | 6.5 | Oct 15 | Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos) Affected: 9.0_aarch64 |
| CVE-2022-24809 | 6.5 | Apr 16 | net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference Affected: 9.0; 9.2_aarch64; 9.4_aarch64 |
| CVE-2022-24808 | 6.5 | Apr 16 | net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference Affected: 9.0; 9.2_aarch64; 9.4_aarch64 |
| CVE-2022-24807 | 6.5 | Apr 16 | net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access Affected: 9.0; 9.2_aarch64; 9.4_aarch64 |
| CVE-2023-4527 | 6.5 | Sep 18 | Glibc: stack read overflow in getaddrinfo in no-aaaa mode Affected: 9.0_aarch64 |
| CVE-2024-3049 | 5.9 | Jun 6 | Booth: specially crafted hash can lead to invalid hmac being accepted by booth server Affected: 8.0_aarch64; 8.8_aarch64; 9.2_aarch64; 9.4_aarch64 |
| CVE-2023-5992 | 5.9 | Jan 31 | Opensc: side-channel leaks while stripping encryption pkcs#1 padding Affected: 8.0_aarch64; 9.0_aarch64 |
| CVE-2023-4806 | 5.9 | Sep 18 | Glibc: potential use-after-free in getaddrinfo() Affected: 9.0_aarch64 |
| CVE-2023-4641 | 5.5 | Dec 27 | Shadow-utils: possible password leak during passwd(1) change Affected: 8.0; 9.0 |
| CVE-2023-4042 | 5.5 | Aug 23 | Ghostscript: incomplete fix for cve-2020-16305 Affected: 8.0_aarch64 |
| CVE-2022-24806 | 5.3 | Apr 16 | net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously Affected: 9.0; 9.2_aarch64; 9.4_aarch64 |
| CVE-2023-7250 | 5.3 | Mar 18 | Iperf3: possible denial of service Affected: 8.0_aarch64; 9.0_aarch64 |
| CVE-2023-6681 | 5.3 | Feb 12 | Jwcrypto: denail of service via specifically crafted jwe Affected: 8.0 |
| CVE-2023-46846 | 5.3 | Nov 3 | Squid: request/response smuggling in http/1.1 and icap Affected: 8.0_aarch64 |
| CVE-2023-4732 | 4.7 | Oct 3 | Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h Affected: 8.0_aarch64 |
| CVE-2024-9675 | 4.4 | Oct 9 | Buildah: buildah allows arbitrary directory mount Affected: 8.0_aarch64; 9.0_aarch64 |
| CVE-2023-5870 | 4.4 | Dec 10 | Postgresql: role pg_signal_backend can signal certain superuser processes. Affected: 8.0; 8.8_aarch64 |
| CVE-2023-5868 | 4.3 | Dec 10 | Postgresql: memory disclosure in aggregate function calls Affected: 8.0; 8.8_aarch64 |
Showing 20