Known vulnerabilities in Oracle Linux 7

Vendor: Oracle
Software: Oracle Linux
Version: 7
Software CPE: cpe:2.3:o:oracle:oracle_linux:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 96
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Linux version 7 Oracle Linux 7 is affected by 96 vulnerabilities: 2 critical, 23 high, 27 medium, 44 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71039 - Improper input validation
CVE-2023-21538		 CWE-20 Medium
No
No
 - 11.01.2023 SB2023011102
SB2023011104
SB2023011236
and 7 more
#VU70460 - Memory corruption
CVE-2022-4139		 CWE-119 Low
No
No
 - 21.12.2022 SB2022122134
SB2022122135
SB2022122136
and 71 more
#VU70442 - Stack-based buffer overflow
CVE-2022-4378		 CWE-121 Low
No
No
 - 20.12.2022 SB2022122008
SB2022122123
SB2022122124
and 124 more
#VU70438 - Use After Free
CVE-2022-4283		 CWE-416 Low
No
No
 - 20.12.2022 SB2022122002
SB2022122003
SB2022122004
and 39 more
#VU70437 - Out-of-bounds read
CVE-2022-46344		 CWE-125 Low
No
No
 - 20.12.2022 SB2022122002
SB2022122003
SB2022122004
and 39 more
#VU70436 - Use After Free
CVE-2022-46343		 CWE-416 Low
No
No
 - 20.12.2022 SB2022122002
SB2022122003
SB2022122004
and 39 more
#VU70435 - Use After Free
CVE-2022-46342		 CWE-416 Low
No
No
 - 20.12.2022 SB2022122002
SB2022122003
SB2022122004
and 39 more
#VU70434 - Out-of-bounds read
CVE-2022-46341		 CWE-125 Low
No
No
 - 20.12.2022 SB2022122002
SB2022122003
SB2022122004
and 39 more
#VU70195 - Type confusion
CVE-2022-42856		 CWE-843 Critical
No
Exploited
 - 13.12.2022 SB2022121376
SB2022121386
SB2022121387
and 21 more
#VU69809 - Out-of-bounds write
CVE-2022-42920		 CWE-787 High
No
No
 - 01.12.2022 SB2022120151
SB2022120154
SB2022120628
and 56 more
#VU69702 - Incorrect Authorization
CVE-2019-25058		 CWE-863 Low
No
No
 - 29.11.2022 SB2022112960
SB2022112961
SB2022120622
and 10 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999		 CWE-94 Medium
Public exploit available
No
 - 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 49 more
#VU68829 - Resource Management Errors
CVE-2022-40304		 CWE-399 Medium
No
No
 - 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303		 CWE-190 High
No
No
 - 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 - 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU67970 - Out-of-bounds read
CVE-2022-42011		 CWE-125 Low
No
No
 - 06.10.2022 SB2022100645
SB2022100708
SB2022102733
and 57 more
#VU67811 - Out-of-bounds write
CVE-2022-2964		 CWE-787 Low
No
No
 - 03.10.2022 SB2022100329
SB2022100331
SB2022102079
and 73 more
#VU66871 - Resource Management Errors
CVE-2022-2132		 CWE-399 Medium
No
No
 - 31.08.2022 SB2022083102
SB2022083104
SB2022090821
and 32 more
#VU66429 - Permissions, Privileges, and Access Controls
CVE-2022-2625		 CWE-264 Low
No
No
 - 12.08.2022 SB2022081212
SB2022081848
SB2022082547
and 40 more
#VU64030 - Resource exhaustion
CVE-2021-44906		 CWE-400 High
No
No
 - 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 52 more


Showing elements 1 - 20 out of 96