Advisories · Technology
Red Hat Enterprise Linux 7.
Every CVE that names Red Hat Enterprise Linux 7 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
Kernel: use after free bug in btsdio_remove due to race condition
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Memory corruption
- CVSS 4.4 Medium
Kernel: security regression for cve-2018-13405
- Linux kernel
- Red Hat Enterprise Linux 8
- Broken access control
- CVSS 7.1 High
Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 6
- Memory corruption
- CVSS 4.9 Medium
Spacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messages
- Red Hat Network Proxy v 5.4
- Red Hat Network Satellite Server v 5.4
- Information disclosure
- CVSS 5.4 Medium
Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form
- Red Hat Network Satellite Server v 5.4
- Red Hat Enterprise Linux 6
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Spacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search forms
- Red Hat Network Satellite Server v 5.4
- Red Hat Enterprise Linux 6
- Cross-site scripting (XSS)
- CVSS 5.5 Medium
Spacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.
- Red Hat Network Satellite Server v 5.4
- Red Hat Enterprise Linux 6
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Spacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameter
- Red Hat Network Satellite Server v 5.4
- Red Hat Enterprise Linux 6
- Open redirect
- CVSS 6.8 Medium
Spacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgery
- Red Hat Network Satellite Server v 5.4
- Red Hat Enterprise Linux 6
- CWE-346
- CVSS 7.5 High
Httpd: mod_fcgid: stack-based buffer overflow in fcgid_header_bucket_read() in modules/fcgid/fcgid_bucket.c
- mod_fcgid
- Red Hat Enterprise Linux 7
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass
- Red Hat Enterprise Linux 3
- Red Hat Enterprise Linux 4
- Weak cryptography or TLS