agentprime: red-hat-enterprise-linux-9-0-extended-update-supportEvery new CVE for red-hat-enterprise-linux-9-0-extended-update-support.https://agentprime.io/CVE-2024-3183: Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute forcehttps://agentprime.io/advisories/CVE-2024-3183/https://agentprime.io/advisories/CVE-2024-3183/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jun 2024 08:18:51 GMTCVECVE-2023-3758: Sssd: race condition during authorization leads to gpo policies functioning inconsistentlyhttps://agentprime.io/advisories/CVE-2023-3758/https://agentprime.io/advisories/CVE-2023-3758/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Apr 2024 19:06:44 GMTCVECVE-2024-31083: Xorg-x11-server: use-after-free in procrenderaddglyphshttps://agentprime.io/advisories/CVE-2024-31083/https://agentprime.io/advisories/CVE-2024-31083/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Apr 2024 12:04:49 GMTCVECVE-2024-31081: Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicehttps://agentprime.io/advisories/CVE-2024-31081/https://agentprime.io/advisories/CVE-2024-31081/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 13:48:12 GMTCVECVE-2024-31080: Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventshttps://agentprime.io/advisories/CVE-2024-31080/https://agentprime.io/advisories/CVE-2024-31080/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 13:47:33 GMTCVECVE-2024-3019: Pcp: exposure of the redis server backend allows remote command execution via pmproxyhttps://agentprime.io/advisories/CVE-2024-3019/https://agentprime.io/advisories/CVE-2024-3019/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Mar 2024 18:32:43 GMTCVECVE-2024-21886: Xorg-x11-server: heap buffer overflow in disabledevicehttps://agentprime.io/advisories/CVE-2024-21886/https://agentprime.io/advisories/CVE-2024-21886/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Feb 2024 12:13:12 GMTCVECVE-2024-21885: Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyeventhttps://agentprime.io/advisories/CVE-2024-21885/https://agentprime.io/advisories/CVE-2024-21885/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Feb 2024 12:11:59 GMTCVECVE-2024-1488: Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalationhttps://agentprime.io/advisories/CVE-2024-1488/https://agentprime.io/advisories/CVE-2024-1488/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Feb 2024 05:04:13 GMTCVECVE-2024-0229: Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory accesshttps://agentprime.io/advisories/CVE-2024-0229/https://agentprime.io/advisories/CVE-2024-0229/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Feb 2024 06:29:51 GMTCVECVE-2023-6240: Kernel: marvin vulnerability side-channel leakage in the rsa decryption operationhttps://agentprime.io/advisories/CVE-2023-6240/https://agentprime.io/advisories/CVE-2023-6240/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 04 Feb 2024 14:11:17 GMTCVECVE-2023-40551: Shim: out of bounds read when parsing mz binarieshttps://agentprime.io/advisories/CVE-2023-40551/https://agentprime.io/advisories/CVE-2023-40551/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:46:43 GMTCVECVE-2023-40546: Shim: out-of-bounds read printing error messageshttps://agentprime.io/advisories/CVE-2023-40546/https://agentprime.io/advisories/CVE-2023-40546/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:29:26 GMTCVECVE-2023-40549: Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe filehttps://agentprime.io/advisories/CVE-2023-40549/https://agentprime.io/advisories/CVE-2023-40549/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:29:26 GMTCVECVE-2023-40550: Shim: out-of-bound read in verify_buffer_sbat()https://agentprime.io/advisories/CVE-2023-40550/https://agentprime.io/advisories/CVE-2023-40550/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:29:23 GMTCVECVE-2023-40548: Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systemshttps://agentprime.io/advisories/CVE-2023-40548/https://agentprime.io/advisories/CVE-2023-40548/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 14:53:44 GMTCVECVE-2023-40547: Shim: rce in http boot support may lead to secure boot bypasshttps://agentprime.io/advisories/CVE-2023-40547/https://agentprime.io/advisories/CVE-2023-40547/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jan 2024 15:54:23 GMTCVECVE-2023-6816: Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointerhttps://agentprime.io/advisories/CVE-2023-6816/https://agentprime.io/advisories/CVE-2023-6816/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jan 2024 04:31:07 GMTCVEcriticalCVE-2024-0646: Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destinationhttps://agentprime.io/advisories/CVE-2024-0646/https://agentprime.io/advisories/CVE-2024-0646/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Jan 2024 15:16:45 GMTCVECVE-2023-4001: Grub2: bypass the grub password protection featurehttps://agentprime.io/advisories/CVE-2023-4001/https://agentprime.io/advisories/CVE-2023-4001/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jan 2024 11:10:19 GMTCVECVE-2023-5455: Ipa: invalid csrf protectionhttps://agentprime.io/advisories/CVE-2023-5455/https://agentprime.io/advisories/CVE-2023-5455/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jan 2024 12:33:00 GMTCVECVE-2023-7192: Kernel: refcount leak in ctnetlink_create_conntrack()https://agentprime.io/advisories/CVE-2023-7192/https://agentprime.io/advisories/CVE-2023-7192/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jan 2024 19:02:45 GMTCVECVE-2023-6546: Kernel: gsm multiplexing race condition leads to privilege escalationhttps://agentprime.io/advisories/CVE-2023-6546/https://agentprime.io/advisories/CVE-2023-6546/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Dec 2023 20:01:03 GMTCVECVE-2023-6478: Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderpropertyhttps://agentprime.io/advisories/CVE-2023-6478/https://agentprime.io/advisories/CVE-2023-6478/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Dec 2023 06:27:41 GMTCVECVE-2023-6377: Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actionshttps://agentprime.io/advisories/CVE-2023-6377/https://agentprime.io/advisories/CVE-2023-6377/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Dec 2023 06:27:40 GMTCVECVE-2023-5870: Postgresql: role pg_signal_backend can signal certain superuser processes.https://agentprime.io/advisories/CVE-2023-5870/https://agentprime.io/advisories/CVE-2023-5870/CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Dec 2023 17:58:30 GMTCVECVE-2023-5868: Postgresql: memory disclosure in aggregate function callshttps://agentprime.io/advisories/CVE-2023-5868/https://agentprime.io/advisories/CVE-2023-5868/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Dec 2023 17:56:57 GMTCVECVE-2023-5869: Postgresql: buffer overrun from integer overflow in array modificationhttps://agentprime.io/advisories/CVE-2023-5869/https://agentprime.io/advisories/CVE-2023-5869/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Dec 2023 17:56:57 GMTCVECVE-2023-42669: Samba: "rpcecho" development server allows denial of service via sleep() call on ad dchttps://agentprime.io/advisories/CVE-2023-42669/https://agentprime.io/advisories/CVE-2023-42669/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Nov 2023 06:57:28 GMTCVECVE-2023-3961: Samba: smbd allows client access to unix domain sockets on the file system as roothttps://agentprime.io/advisories/CVE-2023-3961/https://agentprime.io/advisories/CVE-2023-3961/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 12:32:29 GMTCVEcriticalCVE-2023-46847: Squid: denial of service in http digest authenticationhttps://agentprime.io/advisories/CVE-2023-46847/https://agentprime.io/advisories/CVE-2023-46847/CVSS 8.6 (High). Critical: CVSS score 8.6 (7.0 or more) and EPSS 0.79 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 07:58:05 GMTCVEcriticalCVE-2023-46848: Squid: denial of service in ftphttps://agentprime.io/advisories/CVE-2023-46848/https://agentprime.io/advisories/CVE-2023-46848/CVSS 8.6 (High). Critical: CVSS score 8.6 (7.0 or more) and EPSS 0.11 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 07:58:05 GMTCVEcriticalCVE-2023-5824: Squid: dos against http and httpshttps://agentprime.io/advisories/CVE-2023-5824/https://agentprime.io/advisories/CVE-2023-5824/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 07:56:36 GMTCVECVE-2023-4091: Samba: smb clients can truncate files with read-only permissionshttps://agentprime.io/advisories/CVE-2023-4091/https://agentprime.io/advisories/CVE-2023-4091/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 07:56:35 GMTCVECVE-2023-46846: Squid: request/response smuggling in http/1.1 and icaphttps://agentprime.io/advisories/CVE-2023-46846/https://agentprime.io/advisories/CVE-2023-46846/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Nov 2023 07:33:16 GMTCVEcriticalCVE-2023-5178: Kernel: use after free in nvmet_tcp_free_crypto in nvmehttps://agentprime.io/advisories/CVE-2023-5178/https://agentprime.io/advisories/CVE-2023-5178/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Nov 2023 16:32:20 GMTCVECVE-2023-3972: Insights-client: unsafe handling of temporary files and directorieshttps://agentprime.io/advisories/CVE-2023-3972/https://agentprime.io/advisories/CVE-2023-3972/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Nov 2023 15:54:52 GMTCVECVE-2023-5367: Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputpropertyhttps://agentprime.io/advisories/CVE-2023-5367/https://agentprime.io/advisories/CVE-2023-5367/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Oct 2023 19:46:58 GMTCVECVE-2023-5557: Tracker-miners: sandbox escapehttps://agentprime.io/advisories/CVE-2023-5557/https://agentprime.io/advisories/CVE-2023-5557/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Oct 2023 01:41:45 GMTCVECVE-2023-4911: Glibc: buffer overflow in ld.so leading to privilege escalationhttps://agentprime.io/advisories/CVE-2023-4911/https://agentprime.io/advisories/CVE-2023-4911/CVSS 7.8 (High). Critical: In CISA’s KEV catalogue since 21 Nov 2023: it is known to be exploited. CVSS score 7.8 (7.0 or more) and EPSS 0.64 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Oct 2023 17:25:08 GMTCVEcriticalKEVCVE-2023-5157: Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6https://agentprime.io/advisories/CVE-2023-5157/https://agentprime.io/advisories/CVE-2023-5157/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Sep 2023 13:25:24 GMTCVECVE-2023-42753: Kernel: netfilter: potential slab-out-of-bound access due to integer underflowhttps://agentprime.io/advisories/CVE-2023-42753/https://agentprime.io/advisories/CVE-2023-42753/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Sep 2023 20:25:59 GMTCVECVE-2023-3899: Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configurationhttps://agentprime.io/advisories/CVE-2023-3899/https://agentprime.io/advisories/CVE-2023-3899/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Aug 2023 10:49:11 GMTCVECVE-2023-4459: Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()https://agentprime.io/advisories/CVE-2023-4459/https://agentprime.io/advisories/CVE-2023-4459/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Aug 2023 18:49:13 GMTCVECVE-2023-39417: Postgresql: extension script @substitutions@ within quoting allow sql injectionhttps://agentprime.io/advisories/CVE-2023-39417/https://agentprime.io/advisories/CVE-2023-39417/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Aug 2023 12:19:15 GMTCVECVE-2023-4147: Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-freehttps://agentprime.io/advisories/CVE-2023-4147/https://agentprime.io/advisories/CVE-2023-4147/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Aug 2023 13:19:43 GMTCVECVE-2023-4004: Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()https://agentprime.io/advisories/CVE-2023-4004/https://agentprime.io/advisories/CVE-2023-4004/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Jul 2023 16:22:18 GMTCVECVE-2023-3812: Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_fragshttps://agentprime.io/advisories/CVE-2023-3812/https://agentprime.io/advisories/CVE-2023-3812/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jul 2023 15:19:21 GMTCVECVE-2023-3567: Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to racehttps://agentprime.io/advisories/CVE-2023-3567/https://agentprime.io/advisories/CVE-2023-3567/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jul 2023 15:19:19 GMTCVECVE-2023-2008: Kernel: udmabuf: improper validation of array index leading to local privilege escalationhttps://agentprime.io/advisories/CVE-2023-2008/https://agentprime.io/advisories/CVE-2023-2008/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Apr 2023 00:00:00 GMTCVE