Red Hat Codeready Linux Builder Eus For Power Little Endian vulnerabilities

5 CVEs affecting Red Hat Codeready Linux Builder Eus For Power Little Endian, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-1488, published 2024-02-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-0435, published 2022-03-25. High severity, CVSS 8.8. EPSS: 67.8% chance of exploitation in the next 30 days. A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64…
CVE-2023-4527, published 2023-09-18. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger…
CVE-2023-4806, published 2023-09-18. Medium severity, CVSS 5.9. EPSS: 1.6% chance of exploitation in the next 30 days. A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable…
CVE-2022-0330, published 2022-03-25. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system…
CVE-2024-1488, published 2024-02-15. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over…