Red Hat Mrg Realtime vulnerabilities

9 CVEs affecting Red Hat Mrg Realtime, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-9506, published 2019-08-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-3639, published 2018-05-22. Medium severity, CVSS 5.5. EPSS: 60.6% chance of exploitation in the next 30 days. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of…
CVE-2017-18017, published 2018-01-03. Critical severity, CVSS 9.8. EPSS: 52.8% chance of exploitation in the next 30 days. The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and…
CVE-2009-3547, published 2009-11-04. High severity, CVSS 7.0. EPSS: 4.9% chance of exploitation in the next 30 days. Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting…
CVE-2017-18344, published 2018-07-26. Medium severity, CVSS 5.5. EPSS: 3.4% chance of exploitation in the next 30 days. The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access…
CVE-2018-16871, published 2019-07-30. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null…
CVE-2019-9506, published 2019-08-14. High severity, CVSS 8.1. EPSS: 2.7% chance of exploitation in the next 30 days. The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This…
CVE-2018-13405, published 2018-07-06. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a…
CVE-2014-7283, published 2014-10-13. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. The xfs_da3_fixhashpath function in fs/xfs/xfs_da_btree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a…
CVE-2009-3620, published 2009-10-22. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of…