Red Hat Enterprise Mrg vulnerabilities

73 CVEs affecting Red Hat Enterprise Mrg, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-27825, published 2020-12-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-11477, published 2019-06-19. High severity, CVSS 7.5. EPSS: 98.7% chance of exploitation in the next 30 days. Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker…
CVE-2019-11478, published 2019-06-19. High severity, CVSS 7.5. EPSS: 94.7% chance of exploitation in the next 30 days. Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK)…
CVE-2013-1892, published 2013-10-01. Medium severity, CVSS 6.0. EPSS: 44.5% chance of exploitation in the next 30 days. MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service…
CVE-2011-2189, published 2011-10-10. High severity, CVSS 7.5. EPSS: 17.9% chance of exploitation in the next 30 days. net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for remote attackers to cause…
CVE-2014-3687, published 2014-11-10. High severity, CVSS 7.5. EPSS: 8.6% chance of exploitation in the next 30 days. The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via…
CVE-2014-3673, published 2014-11-10. High severity, CVSS 7.5. EPSS: 7.5% chance of exploitation in the next 30 days. The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and…
CVE-2009-5005, published 2010-10-18. Medium severity, CVSS 5.0. EPSS: 5.9% chance of exploitation in the next 30 days. The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote attackers to cause a denial of service…
CVE-2011-2699, published 2012-05-24. High severity, CVSS 7.5. EPSS: 5.6% chance of exploitation in the next 30 days. The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial…
CVE-2010-3083, published 2010-10-12. Medium severity, CVSS 4.3. EPSS: 4.7% chance of exploitation in the next 30 days. sys/ssl/SslSocket.cpp in qpidd in Apache Qpid, as used in Red Hat Enterprise MRG before 1.2.2 and other products, when SSL is enabled, allows remote attackers to cause a denial of service (daemon…
CVE-2009-5006, published 2010-10-18. Medium severity, CVSS 4.0. EPSS: 4.1% chance of exploitation in the next 30 days. The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and…

Latest

CVE-2020-27825, published 2020-12-11. Medium severity, CVSS 5.7. EPSS: 0.3% chance of exploitation in the next 30 days. A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu buffer running parallely on different cpus,…
CVE-2020-27786, published 2020-12-11. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue.…
CVE-2020-1749, published 2020-09-09. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the…
CVE-2020-10757, published 2020-06-09. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their…
CVE-2020-12826, published 2020-05-12. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a…
CVE-2019-14898, published 2020-05-08. High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days. The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have…
CVE-2012-6685, published 2020-02-19. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. Nokogiri before 1.5.4 is vulnerable to XXE attacks
CVE-2012-3460, published 2019-11-21. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. cumin: At installation postgresql database user created without password
CVE-2014-8181, published 2019-11-06. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer, which may leaking sensitive information to userspace.
CVE-2013-6461, published 2019-11-05. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits