Known vulnerabilities in Red Hat Enterprise Linux Server 8

Vendor: Red Hat Inc.
Software: Red Hat Enterprise Linux Server
Version: 8
Software CPE: cpe:2.3:o:red_hat:red_hat_enterprise_linux_server:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 17
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat Enterprise Linux Server version 8 Red Hat Enterprise Linux Server 8 is affected by 17 vulnerabilities: 4 high, 8 medium, 5 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Public exploit available
No
 - 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-4559		 CWE-22 High
Public exploit available
No
 - 22.09.2022 SB2007082801
SB2022120206
SB2023060825
and 68 more
#VU25547 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-14868		 CWE-78 Low
No
No
 - 24.02.2020 SB2020022414
SB2020022415
SB2020022417
and 14 more
#VU25546 - Heap-based Buffer Overflow
CVE-2020-8112		 CWE-122 Medium
No
No
 - 24.02.2020 SB2020011450
SB2020022412
SB2020022413
and 20 more
#VU25078 - Improper input validation
CVE-2019-16776		 CWE-20 High
No
No
 - 07.02.2020 SB2020011491
SB2020022426
SB2020022514
and 6 more
#VU25014 - Reachable Assertion
CVE-2019-15604		 CWE-617 Medium
No
No
 - 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 10 more
#VU25013 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-15605		 CWE-444 Medium
No
No
 - 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 19 more
#VU25012 - Improper input validation
CVE-2019-15606		 CWE-20 Medium
No
No
 - 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 11 more
#VU23888 - UNIX Symbolic Link (Symlink) Following
CVE-2019-16775		 CWE-61 Low
No
No
 - 02.01.2020 SB2019121217
SB2020022426
SB2020022514
and 6 more
#VU23798 - Stack-based buffer overflow
CVE-2019-19334		 CWE-121 High
No
No
 - 23.12.2019 SB2019120609
SB2019122306
SB2024042354
and 4 more
#VU23797 - Stack-based buffer overflow
CVE-2019-19333		 CWE-121 High
No
No
 - 23.12.2019 SB2019120609
SB2019122306
SB2024042354
and 4 more
#VU23647 - Memory corruption
CVE-2019-19339		 CWE-119 Low
No
No
 - 17.12.2019 SB2019121713
#VU23880 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-16777		 CWE-22 Low
No
No
 - 12.12.2019 SB2019121218
SB2020022426
SB2020022514
and 7 more
#VU22784 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-14869		 CWE-94 Medium
No
No
 - 14.11.2019 SB2019081208
SB2019111433
SB2019111435
and 8 more
#VU19168 - Stack-based buffer overflow
CVE-2019-10193		 CWE-121 Medium
No
No
 - 14.07.2019 SB2019071109
SB2019071110
SB2019080804
and 5 more
#VU19167 - Heap-based Buffer Overflow
CVE-2019-10192		 CWE-122 Medium
No
No
 - 14.07.2019 SB2019071109
SB2019071110
SB2019080804
and 9 more
#VU18090 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-3877		 CWE-601 Low
No
No
 - 28.03.2019 SB2019032802
SB2019032803
SB2019050609
and 4 more