Known vulnerabilities in Red Hat Enterprise Linux for Power 9 - page 5

Vendor: Red Hat Inc.

Software: Red Hat Enterprise Linux for Power

Version: 9

Software CPE: cpe:2.3:o:red_hat:red_hat_enterprise_linux_for_power:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 384

Public exploits: 38

Known exploited (KEV): 4

Vulnerabilities by Severity

Vulnerabilities (384)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU14322 - Permissions, Privileges, and Access Controls CVE-2018-2952	CWE-264	Low	No	No	-	13.08.2018	SB2018080913 SB2018081307 SB2018082404 and 17 more
#VU14218 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2018-10897	CWE-22	Low	No	No	-	06.08.2018	SB2018080718 SB2018081001 SB2018090512 and 6 more
#VU13889 - Heap-based Buffer Overflow CVE-2017-17833	CWE-122	High	No	No	-	16.07.2018	SB2018040907 SB2018071610 SB2018080104 and 10 more
#VU13580 - Missing release of memory after effective lifetime CVE-2018-10805	CWE-401	Low	No	No	-	05.07.2018	SB2018063001 SB2018063002 SB2018062614 and 7 more
#VU13579 - Missing release of memory after effective lifetime CVE-2018-10804	CWE-401	Low	No	No	-	05.07.2018	SB2018063002 SB2018062614 SB2023082360 and 6 more
#VU13565 - Permissions, Privileges, and Access Controls CVE-2018-10856	CWE-264	Low	No	No	-	04.07.2018	SB2018070409 SB2018062611 SB2018062216 and 1 more
#VU13364 - Resource exhaustion CVE-2018-10801	CWE-401	Low	No	No	-	14.06.2018	SB2018061511 SB2018062614 SB2018101112 and 3 more
#VU12911 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2018-3639	CWE-362	Low	No	No	-	22.05.2018	SB2018052201 SB2018052207 SB2018052208 and 142 more
#VU12181 - Authentication Bypass Issues CVE-2017-7562	CWE-592	Low	No	No	-	25.04.2018	SB2017082508 SB2018090704 SB2018041046
#VU12162 - Command injection CVE-2018-6574	CWE-77	Low	Public exploit available	No	-	25.04.2018	SB2018020920 SB2018020921 SB2018030716 and 8 more
#VU12161 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2017-15042	CWE-300	Low	No	No	-	25.04.2018	SB2017102306 SB2017110222 SB2018041050 and 6 more
#VU12160 - Command injection CVE-2017-15041	CWE-77	Low	No	No	-	25.04.2018	SB2017101217 SB2017101218 SB2017102306 and 8 more
#VU9009 - Improper Access Control CVE-2017-10378	CWE-284	Low	No	No	-	31.10.2017	SB2017103101 SB2017102304 SB2017102004 and 16 more
#VU8995 - Exposure of sensitive information to an unauthorized actor CVE-2017-10268	CWE-200	Low	No	No	-	31.10.2017	SB2017103101 SB2017102304 SB2017102004 and 16 more
#VU8901 - Improper input validation CVE-2017-11368	CWE-20	Low	No	No	-	19.10.2017	SB2017092403 SB2017100518 SB2017092810 and 5 more
#VU7390 - Improper input validation CVE-2017-6464	CWE-20	Medium	No	No	-	10.07.2017	SB2017070612 SB2017042007 SB2018041051 and 6 more
#VU10285 - Improper Access Control CVE-2017-3636	CWE-284	Low	No	No	-	01.07.2017	SB2017072005 SB2017072006 SB2017072007 and 13 more
#VU10290 - Improper Access Control CVE-2017-3641	CWE-284	Low	No	No	-	01.07.2017	SB2017072005 SB2017072006 SB2017072007 and 14 more
#VU10300 - Improper Access Control CVE-2017-3651	CWE-284	Low	No	No	-	01.07.2017	SB2017072005 SB2017072006 SB2017072007 and 10 more
#VU10303 - Improper Access Control CVE-2017-3653	CWE-284	Low	No	No	-	01.07.2017	SB2017072005 SB2017072006 SB2017072007 and 14 more

Showing elements 81 - 100 out of 384

Known vulnerabilities in Red Hat Enterprise Linux for Power 9 - page 5

Vulnerabilities by Severity

Vulnerabilities (384)

Please verify you're human