Red Hat Enterprise Linux Compute Node Eus vulnerabilities

7 CVEs affecting Red Hat Enterprise Linux Compute Node Eus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-14816, published 2019-09-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-5165, published 2015-08-12. High severity, CVSS 9.3. EPSS: 13.3% chance of exploitation in the next 30 days. The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.
CVE-2019-6454, published 2019-03-21. Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days. An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming…
CVE-2015-3214, published 2015-08-31. Medium severity, CVSS 6.9. EPSS: 1.6% chance of exploitation in the next 30 days. The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute…
CVE-2018-16866, published 2019-01-11. Low severity, CVSS 3.3. EPSS: 1.1% chance of exploitation in the next 30 days. An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data.…
CVE-2019-14816, published 2019-09-20. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash)…
CVE-2017-15129, published 2018-01-09. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the…
CVE-2015-4170, published 2016-05-02. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and…