Red Hat Enterprise Linux Server Update Services For SAP Solutions vulnerabilities

43 CVEs affecting Red Hat Enterprise Linux Server Update Services For SAP Solutions, 6 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-3049, published 2024-06-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-40438: Apache HTTP Server-Side Request Forgery (SSRF), published 2021-09-16. Critical severity, CVSS 9.0. Actively exploited: in CISA KEV since 2021-12-01. EPSS: 100% chance of exploitation in the next 30 days. A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2017-12615: Apache Tomcat on Windows Remote Code Execution Vulnerability, published 2017-09-19. High severity, CVSS 8.1. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 99.6% chance of exploitation in the next 30 days. When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to…
CVE-2021-4034: Red Hat Polkit Out-of-Bounds Read and Write Vulnerability, published 2022-01-28. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-06-27. EPSS: 94.9% chance of exploitation in the next 30 days. A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users…
CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability, published 2022-03-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-04-25. EPSS: 92.8% chance of exploitation in the next 30 days. A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus…
CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability, published 2022-03-03. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-06-02. EPSS: 5.5% chance of exploitation in the next 30 days. A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1…
CVE-2019-8720: WebKitGTK Memory Corruption Vulnerability, published 2023-03-06. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-05-23. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple…
CVE-2020-9490, published 2020-08-07. High severity, CVSS 7.5. EPSS: 88.8% chance of exploitation in the next 30 days. Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a…
CVE-2021-44142, published 2022-02-21. High severity, CVSS 8.8. EPSS: 73.6% chance of exploitation in the next 30 days. The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba…
CVE-2022-0435, published 2022-03-25. High severity, CVSS 8.8. EPSS: 67.8% chance of exploitation in the next 30 days. A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64…
CVE-2015-5165, published 2015-08-12. High severity, CVSS 9.3. EPSS: 13.3% chance of exploitation in the next 30 days. The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.

Latest

CVE-2024-3049, published 2024-06-06. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.
CVE-2022-24809, published 2024-04-16. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a `GET-NEXT` to the…
CVE-2022-24808, published 2024-04-16. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can use a malformed OID in a `SET` request to…
CVE-2022-24807, published 2024-04-16. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to `SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable` can cause an…
CVE-2022-24806, published 2024-04-16. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an Improper Input Validation vulnerability…
CVE-2022-24805, published 2024-04-16. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the `INDEX` of `NET-SNMP-VACM-MIB` can…
CVE-2023-5455, published 2024-01-10. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could…
CVE-2023-3972, published 2023-11-01. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege…
CVE-2023-3899, published 2023-08-23. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods…
CVE-2023-0494, published 2023-03-27. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write…