Known vulnerabilities in Oracle Linux - page 25

Vendor: Oracle
Software: Oracle Linux
Software CPE: cpe:2.3:o:oracle:oracle_linux:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 1684
Public exploits: 85
Known exploited (KEV): 23
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Linux Oracle Linux is affected by 1684 known vulnerabilities: 13 critical, 266 high, 605 medium, 800 low Critical High Medium Low

Vulnerabilities (1684)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94526 - Resource exhaustion
CVE-2024-4467		 CWE-400 Low
No
No
 - 18.07.2024 SB2024071836
SB2024071838
SB20240718189
and 12 more
#VU94522 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6409		 CWE-362 High
No
No
 - 18.07.2024 SB2024070144
SB2024071838
SB20240718188
and 17 more
#VU94043 - Resource exhaustion
CVE-2024-30105		 CWE-400 Medium
No
No
 - 10.07.2024 SB2024071003
SB2024071025
SB2024071055
and 5 more
#VU93312 - Improper input validation
CVE-2024-3657		 CWE-20 Medium
No
No
 - 25.06.2024 SB20240625103
SB20240625104
SB20240625105
and 22 more
#VU93288 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-4727		 CWE-90 High
No
No
 - 25.06.2024 SB2024062568
SB2024062571
SB2024062739
and 12 more
#VU91288 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32465		 CWE-94 High
No
No
 - 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91160 - Improper input validation
CVE-2024-24790		 CWE-20 Medium
No
No
 - 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU91159 - Improper input validation
CVE-2024-24789		 CWE-20 Low
No
No
 - 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 78 more
#VU90134 - Use After Free
CVE-2021-47356		 CWE-416 Low
No
No
 - 31.05.2024 SB2024053150
SB2024062808
SB20240702143
and 28 more
#VU89492 - Security Features
CVE-2024-3044		 CWE-254 High
No
No
 - 15.05.2024 SB2024051505
SB2024052133
SB2024052849
and 5 more
#VU89491 - Unrestricted Upload of File with Dangerous Type
CVE-2024-32002		 CWE-434 High
Available
No
 - 15.05.2024 SB2024051504
SB2024060720
SB2024060721
and 52 more
#VU89001 - Error Handling
CVE-2024-26584		 CWE-388 Medium
No
No
 - 25.04.2024 SB2024042542
SB2024042545
SB2024042546
and 64 more
#VU88534 - Reachable Assertion
CVE-2024-3652		 CWE-617 Low
No
No
 - 15.04.2024 SB2024041540
SB2024051090
SB2024062201
and 18 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 65 more
#VU88063 - Memory corruption
CVE-2024-28219		 CWE-119 Medium
No
No
 - 03.04.2024 SB2024040318
SB2024040320
SB2024040844
and 28 more
#VU87185 - UNIX Symbolic Link (Symlink) Following
CVE-2023-6597		 CWE-61 Low
No
No
 - 07.03.2024 SB2024030718
SB2024030726
SB2024030727
and 88 more
#VU86885 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48624		 CWE-78 Medium
No
No
 - 28.02.2024 SB2024022820
SB2024022839
SB2024030503
and 60 more
#VU86707 - Server-Side Request Forgery (SSRF)
CVE-2024-24806		 CWE-918 Medium
No
No
 - 22.02.2024 SB2024022210
SB2024022214
SB2024022225
and 54 more
#VU86230 - Resource exhaustion
CVE-2023-52425		 CWE-400 Medium
No
No
 - 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 120 more
#VU77252 - NULL Pointer Dereference
CVE-2023-2953		 CWE-476 Medium
No
No
 - 13.06.2023 SB2023061366
SB2023061417
SB2023061418
and 59 more


Showing elements 481 - 500 out of 1684