Enterprise linux aus

This hub aggregates every CVE we track for Enterprise linux aus, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Enterprise linux aus.

• CVE-2024-3183Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force8.1Jun 12, 2024
• CVE-2024-0229Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access7.8Feb 9, 2024
• CVE-2023-47038Perl: write past buffer end via illegal user-defined unicode property7.0Dec 18, 2023
• CVE-2023-3972Insights-client: unsafe handling of temporary files and directories7.8Nov 1, 2023
• CVE-2023-0494A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and writ...7.8Mar 27, 2023
• CVE-2021-3669A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.5.5Aug 26, 2022
• CVE-2021-20316A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of...6.8Aug 23, 2022
• CVE-2021-3609.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. Th...7.0Mar 3, 2022
• CVE-2021-3570A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or po...8.8Jul 9, 2021
• CVE-2020-14355Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are af...6.6Oct 7, 2020
• CVE-2020-1045Microsoft ASP.NET Core Security Feature Bypass Vulnerability7.5Sep 11, 2020
• CVE-2020-10711A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's categ...5.9May 22, 2020
• CVE-2019-9506Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation8.1Aug 14, 2019
• CVE-2019-11478SACK can cause extensive memory use via fragmented resend queue5.3Jun 18, 2019
• CVE-2019-11477Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs7.5Jun 18, 2019