EL
Product
Enterprise Linux Server Tus
On CISA KEVExploited in the wildRansomware-linked
766
CVEs
21
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 107High 264Medium 129Low 0
Watch
Add Enterprise Linux Server Tus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-2640 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.6; 7.7 |
| CVE-2018-2622 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.6; 7.7 |
| CVE-2017-16541 | 6.5 | Nov 4 | Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web… Affected: 7.6; 7.7 |
| CVE-2017-10384 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.6; 7.7 |
| CVE-2017-10379 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: 7.6; 7.7 |
| CVE-2017-10378 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.6; 7.7 |
| CVE-2017-10243 | 6.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: 7.3; 7.6; 7.7 |
| CVE-2015-7702 | 6.5 | Aug 7 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) Affected: 7.3; 7.6; 7.7 |
| CVE-2017-9775 | 6.5 | Jun 22 | Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document Affected: 7.4; 7.6 |
| CVE-2017-9461 | 6.5 | Jun 6 | smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly… Affected: 7.6 |
| CVE-2017-9287 | 6.5 | May 29 | servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability Affected: 7.6; 7.7 |
| CVE-2017-3453 | 6.5 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.6; 7.7 |
| CVE-2015-8896 | 6.5 | Mar 15 | Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file Affected: 7.2; 7.3; 7.6; 7.7 |
| CVE-2017-3258 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.6; 7.7 |
| CVE-2017-3244 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: 7.6; 7.7 |
| CVE-2017-3238 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.6; 7.7 |
| CVE-2016-5626 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors… Affected: 7.3; 7.6; 7.7 |
| CVE-2016-5624 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML Affected: 7.3; 7.6; 7.7 |
| CVE-2016-5612 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors… Affected: 7.3; 7.6; 7.7 |
| CVE-2016-3492 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors… Affected: 7.3; 7.6; 7.7 |
| CVE-2016-4020 | 6.5 | May 25 | The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information… Affected: 7.6; 7.7 |
| CVE-2015-8631 | 6.5 | Feb 13 | Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a… Affected: 7.2; 7.3; 7.6; 7.7 |
| CVE-2014-1523 | 6.5 | Apr 30 | Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote… Affected: 6.5 |
| CVE-2019-2503 | 6.4 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling) Affected: 8.2; 8.4; 8.6 |
| CVE-2018-18073 | 6.3 | Oct 15 | Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object Affected: 7.6 |
| CVE-2017-3291 | 6.3 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 7.6; 7.7 |
| CVE-2014-0147 | 6.2 | Feb 11 | Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or… Affected: 6.5 |
| CVE-2017-10356 | 6.2 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.4; 7.6; 7.7 |
| CVE-2019-17022 | 6.1 | Jan 8 | When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters Affected: 7.7 |
| CVE-2019-17016 | 6.1 | Jan 8 | When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule Affected: 7.7 |
| CVE-2018-5950 | 6.1 | Jan 23 | Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL Affected: 7.4; 7.6 |
| CVE-2018-2641 | 6.1 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT) Affected: 7.4; 7.6 |
| CVE-2014-1530 | 6.1 | Apr 30 | The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the… Affected: 6.5 |
| CVE-2020-14311 | 6.0 | Jul 31 | There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems Affected: 8.2 |
| CVE-2020-14310 | 6.0 | Jul 31 | There is an issue on grub2 before version 2.06 at function read_section_as_string() Affected: 8.2 |
| CVE-2018-5683 | 6.0 | Jan 23 | The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory… Affected: 7.6; 7.7 |
| CVE-2023-4813 | 5.9 | Sep 12 | Glibc: potential use-after-free in gaih_inet() Affected: 8.8 |
| CVE-2016-2124 | 5.9 | Feb 18 | A flaw was found in the way samba implemented SMB1 authentication Affected: 8.4 |
| CVE-2020-10711 | 5.9 | May 22 | A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7 Affected: 7.4 |
| CVE-2019-2684 | 5.9 | Apr 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 8.2; 8.4; 8.6 |
| CVE-2018-18506 | 5.9 | Feb 5 | When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to… Affected: 7.6; 8.2; 8.4; 8.6 |
| CVE-2019-6111 | 5.9 | Jan 31 | An issue was discovered in OpenSSH 7.9 Affected: 8.2; 8.4; 8.6 |
| CVE-2017-3143 | 5.9 | Jan 16 | An error in TSIG authentication can permit unauthorized dynamic updates Affected: 7.3; 7.6 |
| CVE-2017-3135 | 5.9 | Jan 16 | Combination of DNS64 and RPZ Can Lead to Crash Affected: 7.3; 7.6 |
| CVE-2017-3136 | 5.9 | Jan 16 | An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;" Affected: 7.3; 7.6 |
| CVE-2016-8635 | 5.9 | Aug 1 | It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack Affected: 7.3; 7.6 |
| CVE-2018-10850 | 5.9 | Jun 13 | 389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load Affected: 7.6 |
| CVE-2018-2761 | 5.9 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: 7.6; 7.7 |
| CVE-2018-1049 | 5.9 | Feb 16 | In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel… Affected: 7.4; 7.6 |
| CVE-2018-2618 | 5.9 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 7.4; 7.6 |
The 500 most important CVEs for this product (exploited first, then by severity)