EL
Product
Enterprise Linux Server Update Services For Sap Solutions
On CISA KEVExploited in the wildRansomware-linked
43
CVEs
6
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 25Medium 14Low 1
Watch
Add Enterprise Linux Server Update Services For Sap Solutions to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-24809 | 6.5 | Apr 16 | net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference Affected: 9.2 |
| CVE-2022-24808 | 6.5 | Apr 16 | net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference Affected: 9.2 |
| CVE-2022-24807 | 6.5 | Apr 16 | net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access Affected: 9.2 |
| CVE-2023-5455 | 6.5 | Jan 10 | Ipa: invalid csrf protection Affected: 8.2; 8.6; 9.0; 9.2 |
| CVE-2021-3733 | 6.5 | Mar 7 | There's a flaw in urllib's AbstractBasicAuthHandler class Affected: 8.4 |
| CVE-2020-14301 | 6.5 | May 27 | An information disclosure vulnerability was found in libvirt in versions before 6.3.0 Affected: 8.4 |
| CVE-2024-3049 | 5.9 | Jun 6 | Booth: specially crafted hash can lead to invalid hmac being accepted by booth server Affected: 8.4 |
| CVE-2016-2124 | 5.9 | Feb 18 | A flaw was found in the way samba implemented SMB1 authentication Affected: 8.2; 8.4 |
| CVE-2021-3672 | 5.6 | Nov 23 | A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might… Affected: 8.1; 8.2; 8.4 |
| CVE-2021-3744 | 5.5 | Mar 4 | A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory… Affected: 8.6 |
| CVE-2019-6454 | 5.5 | Mar 17 | An issue was discovered in sd-bus in systemd 239 Affected: 7.3; 7.4; 8.0; 8.1; 8.2 |
| CVE-2022-24806 | 5.3 | Apr 16 | net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously Affected: 9.2 |
| CVE-2017-15129 | 4.7 | Jan 9 | A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11 Affected: 7.4 |
| CVE-2019-15718 | 4.4 | Sep 4 | In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted,… Affected: 8.1; 8.2; 8.4 |
Showing 14