Known vulnerabilities in Oracle Linux 7 - page 3

Vendor: Oracle
Software: Oracle Linux
Version: 7
Software CPE: cpe:2.3:o:oracle:oracle_linux:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 96
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Linux version 7 Oracle Linux 7 is affected by 96 vulnerabilities: 2 critical, 23 high, 27 medium, 44 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70433 - Stack-based buffer overflow
CVE-2022-46340		 CWE-121 Low
No
No
 - 20.12.2022 SB2022122002
SB2022122003
SB2022122004
and 47 more
#VU67969 - Reachable Assertion
CVE-2022-42010		 CWE-617 Low
No
No
 - 06.10.2022 SB2022100645
SB2022100708
SB2022102733
and 58 more
#VU66396 - Use After Free
CVE-2022-2586		 CWE-416 Low
Public exploit available
Exploited
 - 11.08.2022 SB2022081108
SB2022081110
SB2022081111
and 53 more
#VU65441 - Divide By Zero
CVE-2022-2057		 CWE-369 Low
No
No
 - 19.07.2022 SB2022060633
SB2022080316
SB2022080317
and 22 more
#VU65439 - Divide By Zero
CVE-2022-2058		 CWE-369 Low
No
No
 - 19.07.2022 SB2022060633
SB2022080316
SB2022080317
and 23 more
#VU64661 - Insufficient Session Expiration
CVE-2022-0996		 CWE-613 Medium
No
No
 - 24.06.2022 SB2022062433
SB2022062933
SB2022072073
and 13 more
#VU64434 - Use After Free
CVE-2022-1652		 CWE-416 Low
No
No
 - 16.06.2022 SB2022061630
SB2022061631
SB2022061632
and 47 more
#VU64376 - Incomplete cleanup
CVE-2022-21127		 CWE-459 Low
No
No
 - 14.06.2022 SB2022061463
SB2022061464
SB2022061630
and 36 more
#VU64364 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21123		 CWE-200 Low
No
No
 - 14.06.2022 SB2022061454
SB2022061465
SB2022061463
and 97 more
#VU64365 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21125		 CWE-200 Low
No
No
 - 14.06.2022 SB2022061454
SB2022061467
SB2022061463
and 96 more
#VU64366 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21166		 CWE-200 Low
No
No
 - 14.06.2022 SB2022061454
SB2022061466
SB2022061463
and 102 more
#VU63961 - Improper Access Control
CVE-2022-21499		 CWE-284 Low
No
No
 - 03.06.2022 SB2022060302
SB2022060303
SB2022060822
and 39 more
#VU63128 - Memory corruption
CVE-2022-0918		 CWE-119 Medium
Public exploit available
No
 - 12.05.2022 SB2022051236
SB2022051237
SB2022062433
and 13 more
#VU62358 - Use After Free
CVE-2022-1280		 CWE-416 Low
No
No
 - 15.04.2022 SB2022041518
SB2022072819
SB2022101814
and 17 more
#VU49973 - Memory corruption
CVE-2021-3177		 CWE-119 High
No
No
 - 19.01.2021 SB2021012516
SB2021012517
SB2021022418
and 54 more
#VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26137		 CWE-93 Medium
No
No
 - 30.09.2020 SB2020100716
SB2020121420
SB2021052028
and 35 more
#VU48592 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26116		 CWE-93 Medium
No
No
 - 27.09.2020 SB2020092711
SB2020112308
SB2020112309
and 34 more
#VU48600 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-20916		 CWE-22 Medium
No
No
 - 04.09.2020 SB2020090420
SB2020112328
SB2020122208
and 29 more
#VU1132 - Improper input validation
CVE-2016-8864		 CWE-20 Low
No
No
 - 01.11.2016 SB2016110102
SB2017062816
SB2017011105
and 27 more
#VU1013 - NULL Pointer Dereference
CVE-2016-6327		 CWE-476 Low
No
No
 - 17.10.2016 SB2016101702


Showing elements 41 - 60 out of 96