Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support
52 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-9675 | | Buildah: buildah allows arbitrary directory mount | HIGH 7.8 | 0.4 % | ||
| CVE-2024-3183 | | Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force | HIGH 8.1 | 2.1 % | ||
| CVE-2023-3758 | | Sssd: race condition during authorization leads to gpo policies functioning inconsistently | HIGH 7.1 | 1.0 % | ||
| CVE-2024-31083 | | Xorg-x11-server: use-after-free in procrenderaddglyphs | HIGH 7.8 | 1.9 % | ||
| CVE-2024-31081 | | Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice | HIGH 7.3 | 0.5 % | ||
| CVE-2024-31080 | | Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents | HIGH 7.3 | 0.5 % | ||
| CVE-2024-3019 | | Pcp: exposure of the redis server backend allows remote command execution via pmproxy | HIGH 8.8 | 1.1 % | ||
| CVE-2024-1753 | | Buildah: buildah: container escape via improper bind mount validation | HIGH 8.6 | 0.5 % | ||
| CVE-2024-21886 | | Xorg-x11-server: heap buffer overflow in disabledevice | HIGH 7.8 | 1.4 % | ||
| CVE-2024-21885 | | Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent | HIGH 7.8 | 1.4 % | ||
| CVE-2024-1488 | | Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation | HIGH 8.0 | 0.3 % | ||
| CVE-2024-0229 | | Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access | HIGH 7.8 | 1.2 % | ||
| CVE-2023-6240 | fixed in 0:5.14.0-70.101.1.el9_0 | Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation | MEDIUM 6.5 | 1.0 % | ||
| CVE-2023-40551 | | Shim: out of bounds read when parsing mz binaries | MEDIUM 5.1 | 0.4 % | ||
| CVE-2023-40549 | | Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file | MEDIUM 6.2 | 0.4 % | ||
| CVE-2023-40546 | | Shim: out-of-bounds read printing error messages | MEDIUM 6.2 | 0.4 % | ||
| CVE-2023-40550 | | Shim: out-of-bound read in verify_buffer_sbat() | MEDIUM 5.5 | 0.4 % | ||
| CVE-2023-40548 | | Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems | HIGH 7.4 | 0.4 % | ||
| CVE-2023-40547 | | Shim: rce in http boot support may lead to secure boot bypass | HIGH 8.3 | 5.4 % | ||
| CVE-2023-6816 | | Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer | CRITICAL 9.8 | 2.1 % | ||
| CVE-2024-0646 | | Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination | HIGH 7.8 | 0.3 % | ||
| CVE-2023-4001 | fixed in 1:2.06-27.el9_0.16 | Grub2: bypass the grub password protection feature | MEDIUM 6.8 | 0.5 % | ||
| CVE-2023-5455 | | Ipa: invalid csrf protection | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-7192 | | Kernel: refcount leak in ctnetlink_create_conntrack() | MEDIUM 5.5 | 0.3 % | ||
| CVE-2023-6546 | | Kernel: gsm multiplexing race condition leads to privilege escalation | HIGH 7.0 | 0.7 % | ||
| CVE-2023-6478 | | Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty | HIGH 7.6 | 1.6 % | ||
| CVE-2023-6377 | | Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions | HIGH 7.8 | 1.6 % | ||
| CVE-2023-5870 | | Postgresql: role pg_signal_backend can signal certain superuser processes. | MEDIUM 4.4 | 2.6 % | ||
| CVE-2023-5869 | | Postgresql: buffer overrun from integer overflow in array modification | HIGH 8.8 | 4.3 % | ||
| CVE-2023-5868 | | Postgresql: memory disclosure in aggregate function calls | MEDIUM 4.3 | 2.8 % | ||
| CVE-2023-42669 | | Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc | MEDIUM 6.5 | 1.9 % | ||
| CVE-2023-3961 | | Samba: smbd allows client access to unix domain sockets on the file system as root | CRITICAL 9.8 | 2.7 % | ||
| CVE-2023-46848 | fixed in 7:5.2-1.el9_0.3 | Squid: denial of service in ftp | HIGH 8.6 | 11 % | ||
| CVE-2023-46847 | | Squid: denial of service in http digest authentication | HIGH 8.6 | 79 % | ||
| CVE-2023-5824 | | Squid: dos against http and https | HIGH 7.5 | 3.3 % | ||
| CVE-2023-4091 | | Samba: smb clients can truncate files with read-only permissions | MEDIUM 6.5 | 1.3 % | ||
| CVE-2023-46846 | | Squid: request/response smuggling in http/1.1 and icap | CRITICAL 9.3 | 7.2 % | ||
| CVE-2023-5178 | | Kernel: use after free in nvmet_tcp_free_crypto in nvme | HIGH 8.8 | 9.6 % | ||
| CVE-2023-3972 | | Insights-client: unsafe handling of temporary files and directories | HIGH 7.8 | 0.3 % | ||
| CVE-2023-5367 | | Xorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputproperty | HIGH 7.8 | 0.6 % | ||
| CVE-2023-5557 | | Tracker-miners: sandbox escape | HIGH 7.7 | 0.8 % | ||
| CVE-2023-4911 | | Glibc: buffer overflow in ld.so leading to privilege escalation | HIGH 7.8 | 64 % | KEV | |
| CVE-2023-5157 | | Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6 | HIGH 7.5 | 2.3 % | ||
| CVE-2023-42753 | | Kernel: netfilter: potential slab-out-of-bound access due to integer underflow | HIGH 7.8 | 0.5 % | ||
| CVE-2023-3899 | | Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration | HIGH 7.8 | 0.2 % | ||
| CVE-2023-4459 | | Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup() | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-39417 | | Postgresql: extension script @substitutions@ within quoting allow sql injection | HIGH 8.8 | 1.7 % | ||
| CVE-2023-4147 | fixed in 0:5.14.0-70.80.1.el9_0 | Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free | HIGH 7.8 | 0.6 % | ||
| CVE-2023-4004 | | Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() | HIGH 7.8 | 0.9 % | ||
| CVE-2023-3812 | | Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags | HIGH 7.8 | 0.3 % | ||
| CVE-2023-3567 | | Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race | HIGH 7.1 | 0.4 % | ||
| CVE-2023-2008 | fixed in 0:5.14.0-70.58.1.el9_0 | Kernel: udmabuf: improper validation of array index leading to local privilege escalation | HIGH 8.2 | 1.0 % |