Red Hat Linux Advanced Workstation vulnerabilities

65 CVEs affecting Red Hat Linux Advanced Workstation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-1767, published 2008-05-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-5365, published 2007-10-11. High severity, CVSS 7.2. EPSS: 80.3% chance of exploitation in the next 30 days. Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute…
CVE-2003-0434, published 2003-07-24. High severity, CVSS 7.5. EPSS: 40.9% chance of exploitation in the next 30 days. Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
CVE-2004-0104, published 2004-03-03. High severity, CVSS 7.5. EPSS: 26.2% chance of exploitation in the next 30 days. Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.
CVE-2004-0633, published 2004-12-06. Medium severity, CVSS 5.0. EPSS: 18% chance of exploitation in the next 30 days. The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow.
CVE-2004-0882, published 2005-01-27. High severity, CVSS 10.0. EPSS: 13.7% chance of exploitation in the next 30 days. Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data…
CVE-2008-1767, published 2008-05-23. High severity, CVSS 7.5. EPSS: 12.8% chance of exploitation in the next 30 days. Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a…
CVE-2004-0902, published 2005-01-27. High severity, CVSS 10.0. EPSS: 10.1% chance of exploitation in the next 30 days. Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application…
CVE-2004-0903, published 2005-01-27. High severity, CVSS 10.0. EPSS: 9.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to…
CVE-2004-0888, published 2005-01-27. High severity, CVSS 10.0. EPSS: 9.5% chance of exploitation in the next 30 days. Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly…
CVE-2004-0803, published 2004-12-23. High severity, CVSS 7.5. EPSS: 8.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code…

Latest

CVE-2007-1352, published 2007-04-06. Low severity, CVSS 3.8. EPSS: 1.5% chance of exploitation in the next 30 days. Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which…
CVE-2007-1351, published 2007-04-06. High severity, CVSS 8.5. EPSS: 5.6% chance of exploitation in the next 30 days. Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code…
CVE-2006-6235, published 2006-12-07. High severity, CVSS 10.0. EPSS: 5.9% chance of exploitation in the next 30 days. A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG…
CVE-2005-3626, published 2005-12-31. Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days. Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that…
CVE-2005-3625, published 2005-12-31. High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days. Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end…
CVE-2005-3624, published 2005-12-31. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large…
CVE-2005-1918, published 2005-12-31. Low severity, CVSS 2.6. EPSS: 2.9% chance of exploitation in the next 30 days. The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to…
CVE-2005-1760, published 2005-06-13. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.