agentprime: red-hat-enterprise-linux-8-2-telecommunications-update-serviceEvery new CVE for red-hat-enterprise-linux-8-2-telecommunications-update-service.https://agentprime.io/CVE-2024-31083: Xorg-x11-server: use-after-free in procrenderaddglyphshttps://agentprime.io/advisories/CVE-2024-31083/https://agentprime.io/advisories/CVE-2024-31083/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Apr 2024 12:04:49 GMTCVECVE-2024-31081: Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicehttps://agentprime.io/advisories/CVE-2024-31081/https://agentprime.io/advisories/CVE-2024-31081/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 13:48:12 GMTCVECVE-2024-31080: Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventshttps://agentprime.io/advisories/CVE-2024-31080/https://agentprime.io/advisories/CVE-2024-31080/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 13:47:33 GMTCVECVE-2024-21886: Xorg-x11-server: heap buffer overflow in disabledevicehttps://agentprime.io/advisories/CVE-2024-21886/https://agentprime.io/advisories/CVE-2024-21886/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Feb 2024 12:13:12 GMTCVECVE-2024-21885: Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyeventhttps://agentprime.io/advisories/CVE-2024-21885/https://agentprime.io/advisories/CVE-2024-21885/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Feb 2024 12:11:59 GMTCVECVE-2024-1488: Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalationhttps://agentprime.io/advisories/CVE-2024-1488/https://agentprime.io/advisories/CVE-2024-1488/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Feb 2024 05:04:13 GMTCVECVE-2024-0229: Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory accesshttps://agentprime.io/advisories/CVE-2024-0229/https://agentprime.io/advisories/CVE-2024-0229/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Feb 2024 06:29:51 GMTCVECVE-2023-40551: Shim: out of bounds read when parsing mz binarieshttps://agentprime.io/advisories/CVE-2023-40551/https://agentprime.io/advisories/CVE-2023-40551/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:46:43 GMTCVECVE-2023-40546: Shim: out-of-bounds read printing error messageshttps://agentprime.io/advisories/CVE-2023-40546/https://agentprime.io/advisories/CVE-2023-40546/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:29:26 GMTCVECVE-2023-40549: Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe filehttps://agentprime.io/advisories/CVE-2023-40549/https://agentprime.io/advisories/CVE-2023-40549/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:29:26 GMTCVECVE-2023-40550: Shim: out-of-bound read in verify_buffer_sbat()https://agentprime.io/advisories/CVE-2023-40550/https://agentprime.io/advisories/CVE-2023-40550/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:29:23 GMTCVECVE-2023-40548: Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systemshttps://agentprime.io/advisories/CVE-2023-40548/https://agentprime.io/advisories/CVE-2023-40548/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 14:53:44 GMTCVECVE-2023-40547: Shim: rce in http boot support may lead to secure boot bypasshttps://agentprime.io/advisories/CVE-2023-40547/https://agentprime.io/advisories/CVE-2023-40547/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jan 2024 15:54:23 GMTCVECVE-2023-6816: Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointerhttps://agentprime.io/advisories/CVE-2023-6816/https://agentprime.io/advisories/CVE-2023-6816/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jan 2024 04:31:07 GMTCVEcriticalCVE-2024-0646: Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destinationhttps://agentprime.io/advisories/CVE-2024-0646/https://agentprime.io/advisories/CVE-2024-0646/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Jan 2024 15:16:45 GMTCVECVE-2023-5455: Ipa: invalid csrf protectionhttps://agentprime.io/advisories/CVE-2023-5455/https://agentprime.io/advisories/CVE-2023-5455/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jan 2024 12:33:00 GMTCVECVE-2023-7192: Kernel: refcount leak in ctnetlink_create_conntrack()https://agentprime.io/advisories/CVE-2023-7192/https://agentprime.io/advisories/CVE-2023-7192/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jan 2024 19:02:45 GMTCVECVE-2023-6478: Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderpropertyhttps://agentprime.io/advisories/CVE-2023-6478/https://agentprime.io/advisories/CVE-2023-6478/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Dec 2023 06:27:41 GMTCVECVE-2023-6377: Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actionshttps://agentprime.io/advisories/CVE-2023-6377/https://agentprime.io/advisories/CVE-2023-6377/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Dec 2023 06:27:40 GMTCVECVE-2023-5870: Postgresql: role pg_signal_backend can signal certain superuser processes.https://agentprime.io/advisories/CVE-2023-5870/https://agentprime.io/advisories/CVE-2023-5870/CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Dec 2023 17:58:30 GMTCVECVE-2023-5868: Postgresql: memory disclosure in aggregate function callshttps://agentprime.io/advisories/CVE-2023-5868/https://agentprime.io/advisories/CVE-2023-5868/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Dec 2023 17:56:57 GMTCVECVE-2023-5869: Postgresql: buffer overrun from integer overflow in array modificationhttps://agentprime.io/advisories/CVE-2023-5869/https://agentprime.io/advisories/CVE-2023-5869/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Dec 2023 17:56:57 GMTCVECVE-2023-46847: Squid: denial of service in http digest authenticationhttps://agentprime.io/advisories/CVE-2023-46847/https://agentprime.io/advisories/CVE-2023-46847/CVSS 8.6 (High). Critical: CVSS score 8.6 (7.0 or more) and EPSS 0.79 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 07:58:05 GMTCVEcriticalCVE-2023-5824: Squid: dos against http and httpshttps://agentprime.io/advisories/CVE-2023-5824/https://agentprime.io/advisories/CVE-2023-5824/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 07:56:36 GMTCVECVE-2023-46846: Squid: request/response smuggling in http/1.1 and icaphttps://agentprime.io/advisories/CVE-2023-46846/https://agentprime.io/advisories/CVE-2023-46846/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 07:33:16 GMTCVEcriticalCVE-2023-5178: Kernel: use after free in nvmet_tcp_free_crypto in nvmehttps://agentprime.io/advisories/CVE-2023-5178/https://agentprime.io/advisories/CVE-2023-5178/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Nov 2023 16:32:20 GMTCVECVE-2023-3972: Insights-client: unsafe handling of temporary files and directorieshttps://agentprime.io/advisories/CVE-2023-3972/https://agentprime.io/advisories/CVE-2023-3972/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Nov 2023 15:54:52 GMTCVECVE-2023-5367: Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputpropertyhttps://agentprime.io/advisories/CVE-2023-5367/https://agentprime.io/advisories/CVE-2023-5367/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Oct 2023 19:46:58 GMTCVECVE-2023-5557: Tracker-miners: sandbox escapehttps://agentprime.io/advisories/CVE-2023-5557/https://agentprime.io/advisories/CVE-2023-5557/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Oct 2023 01:41:45 GMTCVECVE-2023-42753: Kernel: netfilter: potential slab-out-of-bound access due to integer underflowhttps://agentprime.io/advisories/CVE-2023-42753/https://agentprime.io/advisories/CVE-2023-42753/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Sep 2023 20:25:59 GMTCVECVE-2023-3899: Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configurationhttps://agentprime.io/advisories/CVE-2023-3899/https://agentprime.io/advisories/CVE-2023-3899/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Aug 2023 10:49:11 GMTCVECVE-2023-4459: Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()https://agentprime.io/advisories/CVE-2023-4459/https://agentprime.io/advisories/CVE-2023-4459/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Aug 2023 18:49:13 GMTCVECVE-2023-39417: Postgresql: extension script @substitutions@ within quoting allow sql injectionhttps://agentprime.io/advisories/CVE-2023-39417/https://agentprime.io/advisories/CVE-2023-39417/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Aug 2023 12:19:15 GMTCVECVE-2023-4004: Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()https://agentprime.io/advisories/CVE-2023-4004/https://agentprime.io/advisories/CVE-2023-4004/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Jul 2023 16:22:18 GMTCVECVE-2023-3812: Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_fragshttps://agentprime.io/advisories/CVE-2023-3812/https://agentprime.io/advisories/CVE-2023-3812/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jul 2023 15:19:21 GMTCVE