# Red Hat Enterprise Linux 7. Every CVE that names Red Hat Enterprise Linux 7 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration](https://agentprime.io/advisories/CVE-2023-3899.md) `CVE-2023-3899` · CVE record: Red Hat Red Hat Enterprise Linux 7 and 4 more · CVSS 7.8 High · Not analysed yet · Published 23 Aug 2023 · Tags: Broken access control - [Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()](https://agentprime.io/advisories/CVE-2023-4459.md) `CVE-2023-4459` · CVE record: Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 21 Aug 2023 · Tags: Memory corruption - [Memory leak in btrfs_get_dev_args_from_path()](https://agentprime.io/advisories/CVE-2023-4394.md) `CVE-2023-4394` · CVE record: Kernel and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 17 Aug 2023 · Tags: Denial of service - [Kernel: btrfs: double free in btrfs_get_root_ref()](https://agentprime.io/advisories/CVE-2023-4389.md) `CVE-2023-4389` · CVE record: Kernel and 4 more · CVSS 7.0 High · Not analysed yet · Published 16 Aug 2023 · Tags: Memory corruption - [Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()](https://agentprime.io/advisories/CVE-2023-4387.md) `CVE-2023-4387` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 7.1 High · Not analysed yet · Published 16 Aug 2023 · Tags: Memory corruption - [Kernel: jfs: null pointer dereference in dbfree()](https://agentprime.io/advisories/CVE-2023-4385.md) `CVE-2023-4385` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 16 Aug 2023 · Tags: Memory corruption - [Postgresql: merge fails to enforce update or select row security policies](https://agentprime.io/advisories/CVE-2023-39418.md) `CVE-2023-39418` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-1220 - [Postgresql: extension script @substitutions@ within quoting allow sql injection](https://agentprime.io/advisories/CVE-2023-39417.md) `CVE-2023-39417` · CVE record: Red Hat Red Hat Advanced Cluster Security 4.2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2023 · Tags: SQL injection - [Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry](https://agentprime.io/advisories/CVE-2023-4273.md) `CVE-2023-4273` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 6.0 Medium · Not analysed yet · Published 9 Aug 2023 · Tags: Memory corruption - [Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid](https://agentprime.io/advisories/CVE-2023-4194.md) `CVE-2023-4194` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Aug 2023 · Tags: Memory corruption - [Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free](https://agentprime.io/advisories/CVE-2023-4147.md) `CVE-2023-4147` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 7 Aug 2023 · Tags: Memory corruption - [Out-of-bounds read information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-4135.md) `CVE-2023-4135` · CVE record: qemu-kvm and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 4 Aug 2023 · Tags: Memory corruption - [Kernel: smsusb: use-after-free caused by do_submit_urb()](https://agentprime.io/advisories/CVE-2023-4132.md) `CVE-2023-4132` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption - [Kernel: cxgb4: use-after-free in ch_flower_stats_cb()](https://agentprime.io/advisories/CVE-2023-4133.md) `CVE-2023-4133` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption - [Heap buffer overflow in virtio_crypto_sym_op_helper()](https://agentprime.io/advisories/CVE-2023-3180.md) `CVE-2023-3180` · CVE record: qemu and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption - [Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name](https://agentprime.io/advisories/CVE-2023-38560.md) `CVE-2023-38560` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 1 Aug 2023 · Tags: Memory corruption - [Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos](https://agentprime.io/advisories/CVE-2023-38559.md) `CVE-2023-38559` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 1 Aug 2023 · Tags: Memory corruption - [Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()](https://agentprime.io/advisories/CVE-2023-4004.md) `CVE-2023-4004` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 31 Jul 2023 · Tags: Memory corruption - [Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr](https://agentprime.io/advisories/CVE-2023-3773.md) `CVE-2023-3773` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Jul 2023 · Tags: Memory corruption - [Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()](https://agentprime.io/advisories/CVE-2023-3772.md) `CVE-2023-3772` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Jul 2023 · Tags: Memory corruption - [Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user s…](https://agentprime.io/advisories/CVE-2023-3640.md) `CVE-2023-3640` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 7.0 High · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-385 - [Tree connection null pointer dereference denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-32248.md) `CVE-2023-32248` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32257.md) `CVE-2023-32257` · CVE record: kernel and 4 more · CVSS 8.1 High · Not analysed yet · Published 24 Jul 2023 · Tags: Race condition - [Session null pointer dereference denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-32252.md) `CVE-2023-32252` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32258.md) `CVE-2023-32258` · CVE record: kernel and 4 more · CVSS 8.1 High · Not analysed yet · Published 24 Jul 2023 · Tags: Race condition - [Qemu: 9pfs: suid/sgid bits not dropped on file write](https://agentprime.io/advisories/CVE-2023-1386.md) `CVE-2023-1386` · CVE record: qemu and 4 more · CVSS 3.3 Low · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-281 - [Kernel: vmwgfx: race condition leading to information disclosure vulnerability](https://agentprime.io/advisories/CVE-2023-33951.md) `CVE-2023-33951` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-413 - [Session setup memory exhaustion denial-of-service vulnerability](https://agentprime.io/advisories/CVE-2023-32247.md) `CVE-2023-32247` · CVE record: kernel and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2023 · Tags: Denial of service - [Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h](https://agentprime.io/advisories/CVE-2023-3745.md) `CVE-2023-3745` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service](https://agentprime.io/advisories/CVE-2023-3750.md) `CVE-2023-3750` · CVE record: Red Hat Red Hat Enterprise Linux 9 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: CWE-667 - [Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags](https://agentprime.io/advisories/CVE-2023-3812.md) `CVE-2023-3812` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.8 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()](https://agentprime.io/advisories/CVE-2023-3019.md) `CVE-2023-3019` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race](https://agentprime.io/advisories/CVE-2023-3567.md) `CVE-2023-3567` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.1 High · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects](https://agentprime.io/advisories/CVE-2023-33952.md) `CVE-2023-33952` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Out-of-bounds read when setting hmac data](https://agentprime.io/advisories/CVE-2023-2860.md) `CVE-2023-2860` · CVE record: kernel and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c](https://agentprime.io/advisories/CVE-2023-3863.md) `CVE-2023-3863` · CVE record: Kernel and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 24 Jul 2023 · Tags: Memory corruption - [Processing sftp server read may cause null dereference](https://agentprime.io/advisories/CVE-2023-3603.md) `CVE-2023-3603` · CVE record: libssh and 4 more · CVSS 3.1 Low · Not analysed yet · Published 21 Jul 2023 · Tags: Memory corruption - [Samba: spotlight server-side share path disclosure](https://agentprime.io/advisories/CVE-2023-34968.md) `CVE-2023-34968` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2023 · Tags: Information disclosure - [Samba: type confusion in mdssvc rpc service for spotlight](https://agentprime.io/advisories/CVE-2023-34967.md) `CVE-2023-34967` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.3 Medium · EPSS 0.61 · Not analysed yet · Published 20 Jul 2023 · Tags: Memory corruption - [Samba: infinite loop in mdssvc rpc service for spotlight](https://agentprime.io/advisories/CVE-2023-34966.md) `CVE-2023-34966` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.62 · Not analysed yet · Published 20 Jul 2023 · Tags: Denial of service - [Samba: smb2 packet signing is not enforced when "server signing = required" is set](https://agentprime.io/advisories/CVE-2023-3347.md) `CVE-2023-3347` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Jul 2023 · Tags: Weak cryptography or TLS, CWE-924 - [Samba: out-of-bounds read in winbind auth_crap](https://agentprime.io/advisories/CVE-2022-2127.md) `CVE-2022-2127` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Jul 2023 · Tags: Memory corruption - [Possibility of deadlock in libbpf function sock_hash_delete_elem](https://agentprime.io/advisories/CVE-2023-0160.md) `CVE-2023-0160` · CVE record: kernel and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 18 Jul 2023 · Tags: Denial of service - [Segmentation fault in fax3encode in libtiff/tif_fax3.c](https://agentprime.io/advisories/CVE-2023-3618.md) `CVE-2023-3618` · CVE record: libtiff and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Memory corruption - [Kernel: netlink socket crash (null pointer deref) in netlink_dump function](https://agentprime.io/advisories/CVE-2023-3106.md) `CVE-2023-3106` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.6 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Memory corruption - [Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service](https://agentprime.io/advisories/CVE-2023-3354.md) `CVE-2023-3354` · CVE record: qemu and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption - [Kernel: a race condition in crypto module in the function skcipher_recvmsg](https://agentprime.io/advisories/CVE-2023-3108.md) `CVE-2023-3108` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 6.2 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: Race condition, Denial of service - [Race condition exists in the key generation and rotation functionality](https://agentprime.io/advisories/CVE-2023-1672.md) `CVE-2023-1672` · CVE record: tang and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Jul 2023 · Tags: Race condition - [Distros-\[dirtyvma\] privilege escalation via non-rcu-protected vma traversal](https://agentprime.io/advisories/CVE-2023-3269.md) `CVE-2023-3269` · CVE record: kernel and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jul 2023 · Tags: Memory corruption - [Heap-buffer-overflow in src/formats_i.c](https://agentprime.io/advisories/CVE-2023-34432.md) `CVE-2023-34432` · CVE record: sox and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2023 · Tags: Memory corruption - [Heap-buffer-overflow in src/hcom.c](https://agentprime.io/advisories/CVE-2023-34318.md) `CVE-2023-34318` · CVE record: sox and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jul 2023 · Tags: Memory corruption - [Floating point exception in src/voc.c](https://agentprime.io/advisories/CVE-2023-32627.md) `CVE-2023-32627` · CVE record: sox and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-1077 - [Floating point exception in src/aiff.c](https://agentprime.io/advisories/CVE-2023-26590.md) `CVE-2023-26590` · CVE record: sox and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-1077 - [Tree connection race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32254.md) `CVE-2023-32254` · CVE record: kernel and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2023 · Tags: Race condition - [Session race condition remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-32250.md) `CVE-2023-32250` · CVE record: kernel and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2023 · Tags: Race condition - [Arbitrary file write](https://agentprime.io/advisories/CVE-2023-1183.md) `CVE-2023-1183` · CVE record: libreoffice and 4 more · CVSS 5.0 Medium · EPSS 0.65 · Not analysed yet · Published 10 Jul 2023 · Tags: CWE-20 - [Crash due to a null pointer dereference in the dn_nsp_send function](https://agentprime.io/advisories/CVE-2023-3338.md) `CVE-2023-3338` · CVE record: kernel and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2023 · Tags: Memory corruption - [Libtiff: null pointer dereference in tif_dir.c](https://agentprime.io/advisories/CVE-2023-2908.md) `CVE-2023-2908` · CVE record: Libtiff and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 30 Jun 2023 · Tags: Memory corruption - [Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c](https://agentprime.io/advisories/CVE-2023-3355.md) `CVE-2023-3355` · CVE record: kernel and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 28 Jun 2023 · Tags: Memory corruption - [Kernel: udmabuf: improper validation of array index leading to local privilege escalation](https://agentprime.io/advisories/CVE-2023-2008.md) `CVE-2023-2008` · CVE record: Linux kernel and 4 more · CVSS 8.2 High · Not analysed yet · Published 14 Apr 2023 · Tags: CWE-129 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .