agentprime: red-hat-enterprise-linux-8-6-extended-update-supportEvery new CVE for red-hat-enterprise-linux-8-6-extended-update-support.https://agentprime.io/CVE-2023-3758: Sssd: race condition during authorization leads to gpo policies functioning inconsistentlyhttps://agentprime.io/advisories/CVE-2023-3758/https://agentprime.io/advisories/CVE-2023-3758/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Apr 2024 19:06:44 GMTCVECVE-2024-31083: Xorg-x11-server: use-after-free in procrenderaddglyphshttps://agentprime.io/advisories/CVE-2024-31083/https://agentprime.io/advisories/CVE-2024-31083/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Apr 2024 12:04:49 GMTCVECVE-2024-31081: Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicehttps://agentprime.io/advisories/CVE-2024-31081/https://agentprime.io/advisories/CVE-2024-31081/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 13:48:12 GMTCVECVE-2024-31080: Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventshttps://agentprime.io/advisories/CVE-2024-31080/https://agentprime.io/advisories/CVE-2024-31080/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 13:47:33 GMTCVECVE-2024-3019: Pcp: exposure of the redis server backend allows remote command execution via pmproxyhttps://agentprime.io/advisories/CVE-2024-3019/https://agentprime.io/advisories/CVE-2024-3019/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Mar 2024 18:32:43 GMTCVECVE-2024-28834: Gnutls: vulnerable to minerva side-channel information leakhttps://agentprime.io/advisories/CVE-2024-28834/https://agentprime.io/advisories/CVE-2024-28834/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Mar 2024 13:29:11 GMTCVECVE-2024-21886: Xorg-x11-server: heap buffer overflow in disabledevicehttps://agentprime.io/advisories/CVE-2024-21886/https://agentprime.io/advisories/CVE-2024-21886/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Feb 2024 12:13:12 GMTCVECVE-2024-21885: Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyeventhttps://agentprime.io/advisories/CVE-2024-21885/https://agentprime.io/advisories/CVE-2024-21885/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Feb 2024 12:11:59 GMTCVECVE-2024-1488: Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalationhttps://agentprime.io/advisories/CVE-2024-1488/https://agentprime.io/advisories/CVE-2024-1488/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Feb 2024 05:04:13 GMTCVECVE-2024-1062: 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)https://agentprime.io/advisories/CVE-2024-1062/https://agentprime.io/advisories/CVE-2024-1062/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Feb 2024 13:04:39 GMTCVECVE-2024-0229: Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory accesshttps://agentprime.io/advisories/CVE-2024-0229/https://agentprime.io/advisories/CVE-2024-0229/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Feb 2024 06:29:51 GMTCVECVE-2023-6536: Kernel: null pointer dereference in __nvmet_req_completehttps://agentprime.io/advisories/CVE-2023-6536/https://agentprime.io/advisories/CVE-2023-6536/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Feb 2024 21:05:13 GMTCVECVE-2023-6535: Kernel: null pointer dereference in nvmet_tcp_execute_requesthttps://agentprime.io/advisories/CVE-2023-6535/https://agentprime.io/advisories/CVE-2023-6535/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Feb 2024 21:04:21 GMTCVECVE-2023-6356: Kernel: null pointer dereference in nvmet_tcp_build_iovechttps://agentprime.io/advisories/CVE-2023-6356/https://agentprime.io/advisories/CVE-2023-6356/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Feb 2024 21:04:20 GMTCVECVE-2024-0914: Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)https://agentprime.io/advisories/CVE-2024-0914/https://agentprime.io/advisories/CVE-2024-0914/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 31 Jan 2024 04:53:28 GMTCVECVE-2023-40551: Shim: out of bounds read when parsing mz binarieshttps://agentprime.io/advisories/CVE-2023-40551/https://agentprime.io/advisories/CVE-2023-40551/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:46:43 GMTCVECVE-2023-40546: Shim: out-of-bounds read printing error messageshttps://agentprime.io/advisories/CVE-2023-40546/https://agentprime.io/advisories/CVE-2023-40546/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:29:26 GMTCVECVE-2023-40549: Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe filehttps://agentprime.io/advisories/CVE-2023-40549/https://agentprime.io/advisories/CVE-2023-40549/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:29:26 GMTCVECVE-2023-40550: Shim: out-of-bound read in verify_buffer_sbat()https://agentprime.io/advisories/CVE-2023-40550/https://agentprime.io/advisories/CVE-2023-40550/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:29:23 GMTCVECVE-2023-40548: Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systemshttps://agentprime.io/advisories/CVE-2023-40548/https://agentprime.io/advisories/CVE-2023-40548/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 14:53:44 GMTCVECVE-2023-40547: Shim: rce in http boot support may lead to secure boot bypasshttps://agentprime.io/advisories/CVE-2023-40547/https://agentprime.io/advisories/CVE-2023-40547/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jan 2024 15:54:23 GMTCVECVE-2023-6816: Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointerhttps://agentprime.io/advisories/CVE-2023-6816/https://agentprime.io/advisories/CVE-2023-6816/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jan 2024 04:31:07 GMTCVEcriticalCVE-2024-0646: Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destinationhttps://agentprime.io/advisories/CVE-2024-0646/https://agentprime.io/advisories/CVE-2024-0646/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Jan 2024 15:16:45 GMTCVECVE-2024-0553: Gnutls: incomplete fix for cve-2023-5981https://agentprime.io/advisories/CVE-2024-0553/https://agentprime.io/advisories/CVE-2024-0553/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Jan 2024 11:40:50 GMTCVECVE-2024-0565: Kernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of clienthttps://agentprime.io/advisories/CVE-2024-0565/https://agentprime.io/advisories/CVE-2024-0565/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jan 2024 20:02:02 GMTCVECVE-2024-0562: Kernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.chttps://agentprime.io/advisories/CVE-2024-0562/https://agentprime.io/advisories/CVE-2024-0562/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jan 2024 19:01:36 GMTCVECVE-2023-5455: Ipa: invalid csrf protectionhttps://agentprime.io/advisories/CVE-2023-5455/https://agentprime.io/advisories/CVE-2023-5455/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jan 2024 12:33:00 GMTCVECVE-2023-7192: Kernel: refcount leak in ctnetlink_create_conntrack()https://agentprime.io/advisories/CVE-2023-7192/https://agentprime.io/advisories/CVE-2023-7192/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jan 2024 19:02:45 GMTCVECVE-2023-4641: Shadow-utils: possible password leak during passwd(1) changehttps://agentprime.io/advisories/CVE-2023-4641/https://agentprime.io/advisories/CVE-2023-4641/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Dec 2023 15:43:22 GMTCVECVE-2023-6546: Kernel: gsm multiplexing race condition leads to privilege escalationhttps://agentprime.io/advisories/CVE-2023-6546/https://agentprime.io/advisories/CVE-2023-6546/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Dec 2023 20:01:03 GMTCVECVE-2023-6478: Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderpropertyhttps://agentprime.io/advisories/CVE-2023-6478/https://agentprime.io/advisories/CVE-2023-6478/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Dec 2023 06:27:41 GMTCVECVE-2023-6377: Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actionshttps://agentprime.io/advisories/CVE-2023-6377/https://agentprime.io/advisories/CVE-2023-6377/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Dec 2023 06:27:40 GMTCVECVE-2023-5870: Postgresql: role pg_signal_backend can signal certain superuser processes.https://agentprime.io/advisories/CVE-2023-5870/https://agentprime.io/advisories/CVE-2023-5870/CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Dec 2023 17:58:30 GMTCVECVE-2023-5868: Postgresql: memory disclosure in aggregate function callshttps://agentprime.io/advisories/CVE-2023-5868/https://agentprime.io/advisories/CVE-2023-5868/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Dec 2023 17:56:57 GMTCVECVE-2023-5869: Postgresql: buffer overrun from integer overflow in array modificationhttps://agentprime.io/advisories/CVE-2023-5869/https://agentprime.io/advisories/CVE-2023-5869/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Dec 2023 17:56:57 GMTCVECVE-2023-6610: Kernel: oob access in smb2_dump_detailhttps://agentprime.io/advisories/CVE-2023-6610/https://agentprime.io/advisories/CVE-2023-6610/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Dec 2023 16:58:09 GMTCVECVE-2023-6606: Kernel: out-of-bounds read vulnerability in smbcalcsizehttps://agentprime.io/advisories/CVE-2023-6606/https://agentprime.io/advisories/CVE-2023-6606/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Dec 2023 16:58:08 GMTCVECVE-2023-5981: Gnutls: timing side-channel in the rsa-psk authenticationhttps://agentprime.io/advisories/CVE-2023-5981/https://agentprime.io/advisories/CVE-2023-5981/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Nov 2023 11:49:50 GMTCVECVE-2023-42669: Samba: "rpcecho" development server allows denial of service via sleep() call on ad dchttps://agentprime.io/advisories/CVE-2023-42669/https://agentprime.io/advisories/CVE-2023-42669/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Nov 2023 06:57:28 GMTCVECVE-2023-3961: Samba: smbd allows client access to unix domain sockets on the file system as roothttps://agentprime.io/advisories/CVE-2023-3961/https://agentprime.io/advisories/CVE-2023-3961/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 12:32:29 GMTCVEcriticalCVE-2023-46847: Squid: denial of service in http digest authenticationhttps://agentprime.io/advisories/CVE-2023-46847/https://agentprime.io/advisories/CVE-2023-46847/CVSS 8.6 (High). Critical: CVSS score 8.6 (7.0 or more) and EPSS 0.79 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 07:58:05 GMTCVEcriticalCVE-2023-5824: Squid: dos against http and httpshttps://agentprime.io/advisories/CVE-2023-5824/https://agentprime.io/advisories/CVE-2023-5824/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 07:56:36 GMTCVECVE-2023-4091: Samba: smb clients can truncate files with read-only permissionshttps://agentprime.io/advisories/CVE-2023-4091/https://agentprime.io/advisories/CVE-2023-4091/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 07:56:35 GMTCVECVE-2023-46846: Squid: request/response smuggling in http/1.1 and icaphttps://agentprime.io/advisories/CVE-2023-46846/https://agentprime.io/advisories/CVE-2023-46846/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 07:33:16 GMTCVEcriticalCVE-2023-5178: Kernel: use after free in nvmet_tcp_free_crypto in nvmehttps://agentprime.io/advisories/CVE-2023-5178/https://agentprime.io/advisories/CVE-2023-5178/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Nov 2023 16:32:20 GMTCVECVE-2023-3972: Insights-client: unsafe handling of temporary files and directorieshttps://agentprime.io/advisories/CVE-2023-3972/https://agentprime.io/advisories/CVE-2023-3972/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Nov 2023 15:54:52 GMTCVECVE-2023-5367: Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputpropertyhttps://agentprime.io/advisories/CVE-2023-5367/https://agentprime.io/advisories/CVE-2023-5367/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Oct 2023 19:46:58 GMTCVECVE-2023-5557: Tracker-miners: sandbox escapehttps://agentprime.io/advisories/CVE-2023-5557/https://agentprime.io/advisories/CVE-2023-5557/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Oct 2023 01:41:45 GMTCVECVE-2023-4911: Glibc: buffer overflow in ld.so leading to privilege escalationhttps://agentprime.io/advisories/CVE-2023-4911/https://agentprime.io/advisories/CVE-2023-4911/CVSS 7.8 (High). Critical: In CISA’s KEV catalogue since 21 Nov 2023: it is known to be exploited. CVSS score 7.8 (7.0 or more) and EPSS 0.64 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Oct 2023 17:25:08 GMTCVEcriticalKEVCVE-2023-4732: Kernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.hhttps://agentprime.io/advisories/CVE-2023-4732/https://agentprime.io/advisories/CVE-2023-4732/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Oct 2023 16:55:01 GMTCVE