Red Hat Linux vulnerabilities

229 CVEs affecting Red Hat Linux, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5981, published 2023-11-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2000-0917, published 2000-12-19. High severity, CVSS 10.0. EPSS: 78.7% chance of exploitation in the next 30 days. Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
CVE-2000-0248, published 2000-04-24. High severity, CVSS 10.0. EPSS: 73.7% chance of exploitation in the next 30 days. The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.
CVE-2001-1013, published 2001-09-12. Medium severity, CVSS 5.0. EPSS: 65.6% chance of exploitation in the next 30 days. Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist,…
CVE-1999-0502, published 1998-03-01. High severity, CVSS 7.5. EPSS: 53.3% chance of exploitation in the next 30 days. A Unix account has a default, null, blank, or missing password.
CVE-1999-0043, published 1996-12-04. Critical severity, CVSS 9.8. EPSS: 44.6% chance of exploitation in the next 30 days. Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
CVE-2000-0322, published 2000-04-24. High severity, CVSS 10.0. EPSS: 41.6% chance of exploitation in the next 30 days. The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
CVE-2003-0434, published 2003-07-24. High severity, CVSS 7.5. EPSS: 40.9% chance of exploitation in the next 30 days. Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
CVE-1999-0368, published 1999-02-09. High severity, CVSS 10.0. EPSS: 39.8% chance of exploitation in the next 30 days. Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
CVE-1999-0009, published 1998-04-08. High severity, CVSS 10.0. EPSS: 29% chance of exploitation in the next 30 days. Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
CVE-1999-0002, published 1998-10-12. High severity, CVSS 10.0. EPSS: 27.9% chance of exploitation in the next 30 days. Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.

Latest

CVE-2023-5981, published 2023-11-28. Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
CVE-2018-20346, published 2018-12-21. High severity, CVSS 8.1. EPSS: 10.3% chance of exploitation in the next 30 days. SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables,…
CVE-2018-17962, published 2018-10-09. High severity, CVSS 7.5. EPSS: 4.5% chance of exploitation in the next 30 days. Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.
CVE-2014-3250, published 2017-12-11. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked…
CVE-2016-3699, published 2016-10-07. High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days. The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions…
CVE-2007-5079, published 2007-09-25. Medium severity, CVSS 6.0. EPSS: 1.5% chance of exploitation in the next 30 days. Red Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64 platforms, which might allow remote attackers to bypass intended access restrictions.
CVE-2007-3379, published 2007-09-17. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the kernel in Red Hat Enterprise Linux (RHEL) 4 on the x86_64 platform allows local users to cause a denial of service (OOPS) via unspecified vectors related to the…
CVE-2007-3103, published 2007-07-15. Medium severity, CVSS 6.2. EPSS: 0.9% chance of exploitation in the next 30 days. The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix…
CVE-2007-1352, published 2007-04-06. Low severity, CVSS 3.8. EPSS: 1.5% chance of exploitation in the next 30 days. Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which…
CVE-2005-3626, published 2005-12-31. Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days. Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that…