Red Hat Enterprise Linux For IBM Z Systems s390x vulnerabilities

3 CVEs affecting Red Hat Enterprise Linux For IBM Z Systems s390x, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-4806, published 2023-09-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-4813, published 2023-09-12. Medium severity, CVSS 5.9. EPSS: 2.2% chance of exploitation in the next 30 days. A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the…
CVE-2023-4527, published 2023-09-18. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger…
CVE-2023-4806, published 2023-09-18. Medium severity, CVSS 5.9. EPSS: 1.6% chance of exploitation in the next 30 days. A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable…