Red Hat Messaging Realtime Grid vulnerabilities

4 CVEs affecting Red Hat Messaging Realtime Grid, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-25639, published 2021-03-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-10711, published 2020-05-22. Medium severity, CVSS 5.9. EPSS: 3.1% chance of exploitation in the next 30 days. A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's…
CVE-2019-14816, published 2019-09-20. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash)…
CVE-2019-14814, published 2019-09-20. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system…
CVE-2020-25639, published 2021-03-04. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This…