Red Hat Enterprise Linux Server From Rhui 6 vulnerabilities

2 CVEs affecting Red Hat Enterprise Linux Server From Rhui 6, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-3405, published 2017-08-09.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-2665, published 2012-08-06. High severity, CVSS 7.5. EPSS: 7% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and…
• CVE-2015-3405, published 2017-08-09. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is…